Behavioral task
behavioral1
Sample
1a42ba2874df35e9e198c2cb0cbe3bce.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1a42ba2874df35e9e198c2cb0cbe3bce.exe
Resource
win10v2004-20231215-en
General
-
Target
1a42ba2874df35e9e198c2cb0cbe3bce
-
Size
133KB
-
MD5
1a42ba2874df35e9e198c2cb0cbe3bce
-
SHA1
50d1f8e45082864be1a4fa2212a912d2e7992623
-
SHA256
919e6041b0b88e3548623e959296ced346166085ae0ad346500affab584534d0
-
SHA512
17412a0fd78a3a560da68787d6c39661c1086e7866898af6d5d889f626bf18b9cfa9d3ab47b45c3f3f8532b33e414b8a3eaf29754490d86f204e761a4d92156e
-
SSDEEP
3072:Hiz03jMhySKaO3BuUVPja9EbD3H9ZYZA9FfGIQ:Cz033aORuU5aCHEgBQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a42ba2874df35e9e198c2cb0cbe3bce
Files
-
1a42ba2874df35e9e198c2cb0cbe3bce.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE