Behavioral task
behavioral1
Sample
19003a0f9992dd8bbadc5fef18fbaf04.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
19003a0f9992dd8bbadc5fef18fbaf04.exe
Resource
win10v2004-20231222-en
General
-
Target
19003a0f9992dd8bbadc5fef18fbaf04
-
Size
133KB
-
MD5
19003a0f9992dd8bbadc5fef18fbaf04
-
SHA1
8e39a14c7d8fd5b8260c21d7981eb519feabb648
-
SHA256
4f707dfd7fe8dfc53d4dd7af0bdaf1f4484cbcc4c77126a4e41b2dcd36eeb1b9
-
SHA512
fb3f355c31f7090b8922ed488c503b17a13dd1e1738eff8899b90edb8cf454ad05c68808f1cc533d064cac453816eb83fd2a3cdeab66c8ec4a1081743dd679c8
-
SSDEEP
3072:ZtgdAjXrV4juVo2YeEGlzaCidGgMAxvevXTji4St9A2tgawQ:ZnrVCuVo2DlN6ZxvGnSftgVQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19003a0f9992dd8bbadc5fef18fbaf04
Files
-
19003a0f9992dd8bbadc5fef18fbaf04.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE