Behavioral task
behavioral1
Sample
1811388a6934841ce4eea4f4f73da82a.exe
Resource
win7-20231129-en
General
-
Target
1811388a6934841ce4eea4f4f73da82a
-
Size
784KB
-
MD5
1811388a6934841ce4eea4f4f73da82a
-
SHA1
564e10d4bc6cd86ecdb21471f3ec01f4bc3e8d0c
-
SHA256
a20e5383662dc11164de9d24b4379f4cc2d659be571e5318a651d98b0c057c75
-
SHA512
03e5e6bbe490ccb1864169ab2d536c495b16dfab4f3a7aae90a87122124fad6379f4d4fd2034980b568aab948c40b37ddd570b3661fd7037e1fcaadb63e86812
-
SSDEEP
24576:aThNLZX+zLM47gFY1ReqWfGebLEHeFKExhFTFL:klEg21QOeQIK2hFZL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1811388a6934841ce4eea4f4f73da82a
Files
-
1811388a6934841ce4eea4f4f73da82a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE