Behavioral task
behavioral1
Sample
1ab304433efc42dd9f1a58dd8fd5debe.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1ab304433efc42dd9f1a58dd8fd5debe.exe
Resource
win10v2004-20231215-en
General
-
Target
1ab304433efc42dd9f1a58dd8fd5debe
-
Size
302KB
-
MD5
1ab304433efc42dd9f1a58dd8fd5debe
-
SHA1
3568d0da2f6877675294cc7e0b005389046e97eb
-
SHA256
03b1e137ae6f2f7cf2ff86bf8f6d80814beed175698967497d39bb13b2ce3b3b
-
SHA512
debda675a5fe171bdc1616e5e5f662fbf59c74643a9ba3cae67fe3332d7678b57f89bce45c4d28bac8968bf4a7951310aba696a2b3cca3eea5b86e21cc06b639
-
SSDEEP
3072:9jNQ8HnQjp0XCUQ5xQA/LeQLrln8NG6ywb/BUwyM5Hz2m3IzmYl/iN+rQC6AR:JNQ8rXfLA/L9rlR6yEUK5T2m61imQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1ab304433efc42dd9f1a58dd8fd5debe
Files
-
1ab304433efc42dd9f1a58dd8fd5debe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE