Behavioral task
behavioral1
Sample
19ed4fe6f79b2f594cbfbaaa25a3759a.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
19ed4fe6f79b2f594cbfbaaa25a3759a.exe
Resource
win10v2004-20231215-en
General
-
Target
19ed4fe6f79b2f594cbfbaaa25a3759a
-
Size
16KB
-
MD5
19ed4fe6f79b2f594cbfbaaa25a3759a
-
SHA1
fc73e92964e9c97ad46039fddacafd30c07ee2ad
-
SHA256
11448fa3a826bf79c681fd8a75a6d79d359c5fbaeac9875a2e78c3dfb99f999e
-
SHA512
6ac91b40f7b530e9f7cf370c98dfbb480c45e7e0f1c73f7ea3d59f03ef821425bb7ed44ec976c963be4ebd61a55e0673020d118b0a5fc4ab92b2920941ae93a3
-
SSDEEP
384:1Xq1/7dmJiA/qmx4BQ2Lw+Nm1OChm5A58ykZ0NL4g92S:UjdDA/qmxG925l74gp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19ed4fe6f79b2f594cbfbaaa25a3759a
Files
-
19ed4fe6f79b2f594cbfbaaa25a3759a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE