Behavioral task
behavioral1
Sample
1ac5d146b70048eb20fd5e785c457d0d.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1ac5d146b70048eb20fd5e785c457d0d.exe
Resource
win10v2004-20231222-en
General
-
Target
1ac5d146b70048eb20fd5e785c457d0d
-
Size
133KB
-
MD5
1ac5d146b70048eb20fd5e785c457d0d
-
SHA1
bdacaaf671bd877e700032bfcff72b70fe5efefa
-
SHA256
1fe94792772380e7707161a9597f5972b58184e0f15e0768a32025c50acfea3b
-
SHA512
9762c9ffa492dd9aec905ed642c9c0108ed628c5aabd05b84aaba18bb09af93431de185169009e1e72aadbd47685ce632c30ea6fd1e574e77ff18b69cf500130
-
SSDEEP
3072:CYH6SjxBu6/A2etZ4dPQddqe9MwumRCFHh7Dpq80kOLX4+M5upsQ:h6uD9/A3tOdPadCwJgRpq8EI+MAsQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1ac5d146b70048eb20fd5e785c457d0d
Files
-
1ac5d146b70048eb20fd5e785c457d0d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE