Behavioral task
behavioral1
Sample
1ac8e1668408d03c15f6a96c94ad673e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1ac8e1668408d03c15f6a96c94ad673e.exe
Resource
win10v2004-20231215-en
General
-
Target
1ac8e1668408d03c15f6a96c94ad673e
-
Size
133KB
-
MD5
1ac8e1668408d03c15f6a96c94ad673e
-
SHA1
23386fba33afed984e1037b6aa76b7f9630aa030
-
SHA256
6b2fd3e9344675656c64a40ede8fb9ffb7264ba94a0b61e65658cc379b75f334
-
SHA512
52dc79942c0031d8e15771eab66288f7562a553becfe0d4958c710e96d55151a7fe5ad3fd28287d70654816778e769e0fcb323de15ec135af0ad2f0c569c353c
-
SSDEEP
3072:j/Bk4wDxHNlV8gdTRezEpektkzM/quO/hQ:j/BkBfNXjWzM/quO/hQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1ac8e1668408d03c15f6a96c94ad673e
Files
-
1ac8e1668408d03c15f6a96c94ad673e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE