Behavioral task
behavioral1
Sample
1a70d5b673cad448c9e2062128524253.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1a70d5b673cad448c9e2062128524253.exe
Resource
win10v2004-20231222-en
General
-
Target
1a70d5b673cad448c9e2062128524253
-
Size
250KB
-
MD5
1a70d5b673cad448c9e2062128524253
-
SHA1
4832d21cc0897310d9efc1000088b31385c3067d
-
SHA256
464e54d976c2d51e8a8cb5633adae8c6e4eab790a26b72f61defc9cb2c0e6dee
-
SHA512
af8cf4fbfe76655892c256a2b28b59773486864c0a467457a5cb9cdc5f1d795b02fe41e8e46af6d780c5cf1c3dc3f22c5fa2d57e4277f2dd8dda7377122ece5b
-
SSDEEP
6144:N35aNY6yHry4wVprSvyxpvloMVCB22D/LlAXGyJmoSb:SBye7VpGvyPKMVCB2Q/LaJJmoSb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a70d5b673cad448c9e2062128524253
Files
-
1a70d5b673cad448c9e2062128524253.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 232KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 247KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE