Behavioral task
behavioral1
Sample
12bcbdb183666a2099374a4381a9f718.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
12bcbdb183666a2099374a4381a9f718.exe
Resource
win10v2004-20231222-en
General
-
Target
12bcbdb183666a2099374a4381a9f718
-
Size
1.6MB
-
MD5
12bcbdb183666a2099374a4381a9f718
-
SHA1
634002a4a583e76fbc6f61b36fc5b236a2e5be57
-
SHA256
9b6b573d26b0562f78d32b93c8b56d5f2a1d038499a3c024176fdb37c0b9e51c
-
SHA512
97f2a238bde09a6a4f279a4e76ce3bb3721fcf53ef6cad6c00f34454e4d186bb4c6a209220a6252fa524b40a1b328b7b13680e974873c5c0f3a35d4d4378f654
-
SSDEEP
49152:qc1vxb2ca+bKUMGFy4cakLz0XWzJy581Sa3cakLz0O:qg52cDGUMGFy4cakcmzU581lcakcO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12bcbdb183666a2099374a4381a9f718
Files
-
12bcbdb183666a2099374a4381a9f718.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE