Behavioral task
behavioral1
Sample
1309ca145c9d6d2cbfd47da4f021e905.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1309ca145c9d6d2cbfd47da4f021e905.exe
Resource
win10v2004-20231215-en
General
-
Target
1309ca145c9d6d2cbfd47da4f021e905
-
Size
52KB
-
MD5
1309ca145c9d6d2cbfd47da4f021e905
-
SHA1
20c8fb7c385340baedd1c543e1570839dd790e71
-
SHA256
55f48463bd109b3144ed1ad9e70629f6bafd3e524f40f0fa390ceb90aea0442c
-
SHA512
47e9cf86fa21a736949759edb90637e4d0ef3ac79a685b0cb65ee39bd45951db5634c4b21ea9770d84dbdb83b7cf7de0151751d43e40d2dfb2bc4898d34268e3
-
SSDEEP
1536:s9Z3KcR4mjD9r8226+a+PaXnMHdLScltz2Vj8g:sr3KcWmjRrzSxSM912VZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1309ca145c9d6d2cbfd47da4f021e905
Files
-
1309ca145c9d6d2cbfd47da4f021e905.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE