Behavioral task
behavioral1
Sample
1415cc2eab8125637293a39bfb102f3a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1415cc2eab8125637293a39bfb102f3a.exe
Resource
win10v2004-20231215-en
General
-
Target
1415cc2eab8125637293a39bfb102f3a
-
Size
133KB
-
MD5
1415cc2eab8125637293a39bfb102f3a
-
SHA1
b4a0d7bfa91a14a33650dd907e8d951d11154529
-
SHA256
1f831ae9ae8b75ade33505a227bb1a54cec774dfaebb0d59f9039b2d480e25aa
-
SHA512
d03a653bb3cf51fef4486ebf59146e216fbceccd2b963ebb3430608c9922e5ab79af3bb464bacc68905f11cdd29b2608590128d83af529af47051d8fb6db4ede
-
SSDEEP
3072:kjDI1ERc/NetCsELUwJQTwQ2rEeCm39vqggrpi87WHBVPXQ:kj81EKetCsE7vE29Cggc3BpXQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1415cc2eab8125637293a39bfb102f3a
Files
-
1415cc2eab8125637293a39bfb102f3a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE