Behavioral task
behavioral1
Sample
1199c934a72739814b202c6caa58ae4a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1199c934a72739814b202c6caa58ae4a.exe
Resource
win10v2004-20231215-en
General
-
Target
1199c934a72739814b202c6caa58ae4a
-
Size
5.3MB
-
MD5
1199c934a72739814b202c6caa58ae4a
-
SHA1
4132f305cc6a5e8be46ba9f4a85dee58d487269a
-
SHA256
a5c3b4eec2b2acef25f6f0f0a3ad4cb51d35e7fc41c13fb814ff37bc8f7cf63a
-
SHA512
9bb3faff613be3f93543a92fe896d2d9b57cbcb7d47c76f77f76ec813f3bb9db1b149a714c5e2eab07b7d8147afd8215b8648949d493ce1f1a01bb7c5ee29753
-
SSDEEP
98304:cBXRnAnG+6nX84Zx/9LIcDqyCFLbTx/9LIcD:cBhnA4nX84ZDIc+yCFPTDIc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1199c934a72739814b202c6caa58ae4a
Files
-
1199c934a72739814b202c6caa58ae4a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE