Behavioral task
behavioral1
Sample
1509916e8bd91f3e298aa1fb6fe968aa.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1509916e8bd91f3e298aa1fb6fe968aa.exe
Resource
win10v2004-20231215-en
General
-
Target
1509916e8bd91f3e298aa1fb6fe968aa
-
Size
3.9MB
-
MD5
1509916e8bd91f3e298aa1fb6fe968aa
-
SHA1
215b60b8faa4debf49089cbe1fee4bb68c2089a1
-
SHA256
b1d4e5f2f0229f3747f09d444277bef64870a601428f26b96a1c4bd705dff5ab
-
SHA512
f3648757f9bf2d58a95ddc921a382e1c87a20d089536eefb01f3c18857d8358ee38546d1d5ed83a93ef2fe58ce5cdb8d3846b471c9ecab05c96e1b14959d7940
-
SSDEEP
98304:o6YGckxrOOINwMcakcibiqhJ1Ay5NRom33hcakcibiqhfpHiyOZS6kcakcibiqh4:o6YGcFxNwMdlirpNRo8RdlirnCRCdliS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1509916e8bd91f3e298aa1fb6fe968aa
Files
-
1509916e8bd91f3e298aa1fb6fe968aa.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE