Behavioral task
behavioral1
Sample
19c13fe7418e70bedab18bdcea6e77dd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
19c13fe7418e70bedab18bdcea6e77dd.exe
Resource
win10v2004-20231215-en
General
-
Target
19c13fe7418e70bedab18bdcea6e77dd
-
Size
62KB
-
MD5
19c13fe7418e70bedab18bdcea6e77dd
-
SHA1
6a8ca68685815d3cef5227189143b5bf46cb59ea
-
SHA256
6b7f2b84a4de7cc97ba88fb4ec8ad61b8fc3d007506b2a9c01355a79094913c4
-
SHA512
057365403e8495ae58061ea10bce0f400aa37d55dd2e9e8888117f959bc3125443edd63b9aa21fecefbb6f27b2d6edbe9350e435c8ee0725b306d8db80af1e68
-
SSDEEP
1536:jVNEwuiheL6HMW9LM5nwgisCBld/GFKWEPxDemhxnouy8xEY5qnXuL:jfEwVi6H5LCnydCKW41NoutxLInX8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19c13fe7418e70bedab18bdcea6e77dd
Files
-
19c13fe7418e70bedab18bdcea6e77dd.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 120KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE