Behavioral task
behavioral1
Sample
18537da49fbe9370d19d05507a127d0d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
18537da49fbe9370d19d05507a127d0d.exe
Resource
win10v2004-20231215-en
General
-
Target
18537da49fbe9370d19d05507a127d0d
-
Size
5.1MB
-
MD5
18537da49fbe9370d19d05507a127d0d
-
SHA1
2eebc031cff9612dc9e13dc6e867aa31cb8ccabc
-
SHA256
8db9d357d155046c5e19d0c1f5602087cb73c27cf80c4d66f8aac886e050a2f4
-
SHA512
8a2f0ebf871f2f2b8d029b0bb503c6251d2d20fc734c80b61817067c6e5e7055e81d25e8e672345e34b5be63245cc3236531ca87e69a213ed59bc7af40ff1200
-
SSDEEP
49152:sRRM3kNN7x2ESOAHTjIq/VNseKi4B+XQGRZSsoiay3R3GaQzDEsK8i2ekmh2oCvV:ssLVswMB+AEoK3RH8tKt2zMbC8gD3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 18537da49fbe9370d19d05507a127d0d
Files
-
18537da49fbe9370d19d05507a127d0d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE