Behavioral task
behavioral1
Sample
118a412253f50364f8d8fe693e9c8d18.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
118a412253f50364f8d8fe693e9c8d18.exe
Resource
win10v2004-20231215-en
General
-
Target
118a412253f50364f8d8fe693e9c8d18
-
Size
5KB
-
MD5
118a412253f50364f8d8fe693e9c8d18
-
SHA1
cafcdf3a5e409ef2de05216097bf0428569decd9
-
SHA256
e2cdeba75f95cbd7b6ba826036a5a61fc4adf73c192a624624542d0ed58a88b7
-
SHA512
6aa9346c5afcafc113a90f4b0ffb0e276b15d5577be44f049d10f6888f2f9be759434184f7a1ee362f86b851d3557ea7b98e94238e20bf4dfed8b36201c0cdf6
-
SSDEEP
96:s6FydHg8I9s4A2S+uIJGSEMhz6y6DFbjWC/VkOyY0GP7CYjFxjaICc:s6FyqyCS+uILJ6y6B3WC/mC15N
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 118a412253f50364f8d8fe693e9c8d18
Files
-
118a412253f50364f8d8fe693e9c8d18.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE