Behavioral task
behavioral1
Sample
11d1cda444f945efcd45d0c776f20413.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
11d1cda444f945efcd45d0c776f20413.exe
Resource
win10v2004-20231215-en
General
-
Target
11d1cda444f945efcd45d0c776f20413
-
Size
140KB
-
MD5
11d1cda444f945efcd45d0c776f20413
-
SHA1
5054d922e365b9def7698417b74f277c524b0435
-
SHA256
dc56bcaab911742df7893fc8787057a8288bbe659f7aebf803831ba6ec0b8510
-
SHA512
e0bf9853ff994bd7e4813bd3dece01745f4437cb0fd4b42247ea4e9522d86d5352a684f51397f641bdb2c623ebf2f4c2cb4681220d95a55a32a8970fdd50187a
-
SSDEEP
3072:I9k6/eOWFv/DiFU6mxAeRtgBoepTGetSHe6GP69W4ADID3I1uBoplw4n2ZIFxR:I9k6/mgFnmxAueBoepT4HZ9/LAn0EL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11d1cda444f945efcd45d0c776f20413
Files
-
11d1cda444f945efcd45d0c776f20413.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 444KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 393KB - Virtual size: 396KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE