Behavioral task
behavioral1
Sample
18b5f9bd45f24106b54dbb8ece0926a7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
18b5f9bd45f24106b54dbb8ece0926a7.exe
Resource
win10v2004-20231215-en
General
-
Target
18b5f9bd45f24106b54dbb8ece0926a7
-
Size
32KB
-
MD5
18b5f9bd45f24106b54dbb8ece0926a7
-
SHA1
b9565b3a253e493c94d0795c91e6a64b9ee4740e
-
SHA256
c6aa8b5396b8e53c47f92bc946d87f5c39e6d5f85118cd6ca0f813a9f50b9bdd
-
SHA512
c6cda4618e1d44f5814d8bcb8c13cbecc3ac6b0299a23bba5f549fbc9f4450d0e06d8b10daebef8984fd4b1453f6c906769313450bae59359efa60af457947da
-
SSDEEP
768:3hm09luSTflJOUbp4UVb+TfXPxoFvw71MN/lVCZBO2:3hmm9flJf1Vb0X2Fvgo/lYZBO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 18b5f9bd45f24106b54dbb8ece0926a7
Files
-
18b5f9bd45f24106b54dbb8ece0926a7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Jackie Size: 512B - Virtual size: 512B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE