Behavioral task
behavioral1
Sample
1727929585238c7d00d401e3311f1360.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1727929585238c7d00d401e3311f1360.exe
Resource
win10v2004-20231215-en
General
-
Target
1727929585238c7d00d401e3311f1360
-
Size
784KB
-
MD5
1727929585238c7d00d401e3311f1360
-
SHA1
ff0b1148a5e74c20a0ba05325afa865456013b3d
-
SHA256
3b498b403e5dd68b9277817de64b259b972fdf796d361d28c0b154d4a7a7c21e
-
SHA512
891bd97e8fda3833911e86953dd724c75c6c0a3c8a2d23d415361f130efe1cf567a9b246b49e8c1f6d797827762fb3090bda7f612912a9213eedfa666af1e16b
-
SSDEEP
24576:k3p4FECA5SHiegh5WM4P2lwsuQ0VxJYaEz64u82:kZIA5SCh5WM4P2WUXy4u8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1727929585238c7d00d401e3311f1360
Files
-
1727929585238c7d00d401e3311f1360.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE