Behavioral task
behavioral1
Sample
1502628f20cb7d87d92e1ae05532801b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1502628f20cb7d87d92e1ae05532801b.exe
Resource
win10v2004-20231215-en
General
-
Target
1502628f20cb7d87d92e1ae05532801b
-
Size
7.8MB
-
MD5
1502628f20cb7d87d92e1ae05532801b
-
SHA1
9f48d933fc4faa1368bec4f5643b3bb03ac12b2e
-
SHA256
06a003653599db12231b3e1cf80a726f746d16ff4e84af255c6b56664e868027
-
SHA512
e3cfb4991ab82a57ac01665982894484276760037005a01d15ccf2492807f6094bfd09e88f63a6657eac9d1c1d7b5678e8f2f58eaf92295c81a8a46e0eadad38
-
SSDEEP
196608:FX9fpms7dlirybMgOnkdlirIS4RdlirybMgOnkdlirZj6tVMndlirybMgOnkdlix:rhHbMrnmbMrn5cObMrnmbMrn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1502628f20cb7d87d92e1ae05532801b
Files
-
1502628f20cb7d87d92e1ae05532801b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE