Behavioral task
behavioral1
Sample
1a672229f02c6a1b243d1e121af20203.exe
Resource
win7-20231215-en
General
-
Target
1a672229f02c6a1b243d1e121af20203
-
Size
784KB
-
MD5
1a672229f02c6a1b243d1e121af20203
-
SHA1
129e64038bb507b774a08275d20563beca042622
-
SHA256
19180ecd63ff6aee6453a6a433717fe00b3efe2523793c61d9de7e313c273c62
-
SHA512
f28ccc4678db5a42d911fcae0275ad5b18742f3785bd85ebbf95ecfc0946e107ce075e7cacd0c2e7ca7a3fe30b0628615726b32ea18a57be14e6e940d3b03440
-
SSDEEP
24576:L3Jt7mnjEaAZJFUCJBgCqxpGSH8wr7gqt9w:jDSnvMUCJytxpGQwj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a672229f02c6a1b243d1e121af20203
Files
-
1a672229f02c6a1b243d1e121af20203.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE