Behavioral task
behavioral1
Sample
1a915699a9205e4233c4c2f427818fbb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1a915699a9205e4233c4c2f427818fbb.exe
Resource
win10v2004-20231215-en
General
-
Target
1a915699a9205e4233c4c2f427818fbb
-
Size
2.7MB
-
MD5
1a915699a9205e4233c4c2f427818fbb
-
SHA1
c96b0c67d80201f12ba33d979440b729896e0006
-
SHA256
050840cf453edc49afc7204d2c7084aafc3b4cac8522e958d7fb8930c992d012
-
SHA512
6d3cb44297a4fc2b0197241b6457a577c5e96642671b3e3f2160f41ea76af62e2b45abf1a0668c669884a2814f9e9e0185933bbd8dc477b2eac1855937376d40
-
SSDEEP
49152:SEaBRP54xa/+TX68bP2qnRJgYcKuzZ0f+4dWFzI0gf:SBpsa/+DdzPJmWf+46hgf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a915699a9205e4233c4c2f427818fbb
Files
-
1a915699a9205e4233c4c2f427818fbb.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE