Behavioral task
behavioral1
Sample
191fbb2dbbc1d4b920b3ce93bd1c7728.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
191fbb2dbbc1d4b920b3ce93bd1c7728.exe
Resource
win10v2004-20231215-en
General
-
Target
191fbb2dbbc1d4b920b3ce93bd1c7728
-
Size
1.5MB
-
MD5
191fbb2dbbc1d4b920b3ce93bd1c7728
-
SHA1
b1489b7bbd7fa9ee0a0c90a44929fbf07a8bd515
-
SHA256
db919e49ad1788b229cbcba3ff95f2f3099181c86bd63f911fc5b25e05e060eb
-
SHA512
f3960d10e65cfe56b9adf5ff22c0ae818e0169fbd2cb02b4696c09d767a9d87ad699a79dbe012be84bd9d09e497987b3ea74b9932fdef03911eb832d16157efe
-
SSDEEP
12288:6+FwJpfjBSwve5wyDPlZJ7rX7ffFAMCgQRqbWC0UHznS5rewhuCoI1y9PsPw0NsD:jFAdBSwun5ARgQWHiawXm9EnOFrgW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 191fbb2dbbc1d4b920b3ce93bd1c7728
Files
-
191fbb2dbbc1d4b920b3ce93bd1c7728.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE