Behavioral task
behavioral1
Sample
1af0c0bc3de56f43fa0c0fdd135a53c4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1af0c0bc3de56f43fa0c0fdd135a53c4.exe
Resource
win10v2004-20231215-en
General
-
Target
1af0c0bc3de56f43fa0c0fdd135a53c4
-
Size
5.8MB
-
MD5
1af0c0bc3de56f43fa0c0fdd135a53c4
-
SHA1
4f681efcc06c537cc0f0a043f3c889327b7e2e18
-
SHA256
1491266ca1e6bea2658a62f5d337a29e6692f81c93eec237ea7fcf95870c4207
-
SHA512
a3a65543ce7cdac0c8ef0bb9a0e3cb379bb2556e01dde7f394ba6353a18a43b89bd8451cfefec46f8fcf8fb7d59073d96994dbe57ecf8faacee2dbea23f66c23
-
SSDEEP
98304:2CoQ1G1aYlQaHau42c1joCjMPkNwk689zyTFa5oSeP5U7x4qHau42c1joCjMPkNQ:bo+YPauq1jI86k9ziY5qGxJauq1jI86
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1af0c0bc3de56f43fa0c0fdd135a53c4
Files
-
1af0c0bc3de56f43fa0c0fdd135a53c4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE