Behavioral task
behavioral1
Sample
11397d449eba2ab581c4068d1374080a.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
11397d449eba2ab581c4068d1374080a.exe
Resource
win10v2004-20231222-en
General
-
Target
11397d449eba2ab581c4068d1374080a
-
Size
85KB
-
MD5
11397d449eba2ab581c4068d1374080a
-
SHA1
3f1649fb47b5cafbc2132568e9d703ffce7ed193
-
SHA256
26bfb07980812d05e6bd0852afb8b985f68d2e5dd0de930f5aa16399efd12337
-
SHA512
a37314c2dedcbc0bb9e8375a8d8d39c418b07507c62491547f3341348b2e69314e9db8559431b5898ddb36084f0e586c2357fc9ca66eaeb5e5bbc8d34fcd71c2
-
SSDEEP
1536:SKcR4mjD9r823FVPBXA6oBeN85Y/UXq6MFHRQkAEzp3LRn1dZzP7zW5u:SKcWmjRrz3b9oBeNKuRQkAsRDR/W5u
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11397d449eba2ab581c4068d1374080a
Files
-
11397d449eba2ab581c4068d1374080a.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE