Behavioral task
behavioral1
Sample
1410e4f9ceab042582372142dd02cc3f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1410e4f9ceab042582372142dd02cc3f.exe
Resource
win10v2004-20231215-en
General
-
Target
1410e4f9ceab042582372142dd02cc3f
-
Size
10.2MB
-
MD5
1410e4f9ceab042582372142dd02cc3f
-
SHA1
044dd1ff6565d2fcddbdab3eee4cd3bc2d144170
-
SHA256
efbed684817f3d134df3e7c2570d79f997457dd7d123e6b35d83ba46782d2d8e
-
SHA512
86a196c6effda580a5db49a046cc3dbf0b9419cb990c6cf75de61fbc256e9660d0f539b86f73a46d1bac836b4f298ac9a1fe2b29e4c1637a13c1706c8d641835
-
SSDEEP
98304:/b8XLWfln3PXMzZhKDV3vaTml2Kc3qG3PXMzZhKDV3:/bcLofc1hU2ml2Kh4c1h
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1410e4f9ceab042582372142dd02cc3f
Files
-
1410e4f9ceab042582372142dd02cc3f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE