Behavioral task
behavioral1
Sample
1aff03cd57cfc8e5fe3abc10bbb4df32.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1aff03cd57cfc8e5fe3abc10bbb4df32.exe
Resource
win10v2004-20231222-en
General
-
Target
1aff03cd57cfc8e5fe3abc10bbb4df32
-
Size
3.9MB
-
MD5
1aff03cd57cfc8e5fe3abc10bbb4df32
-
SHA1
86cd464dd36c504204d3bfac918e4439ad85b63c
-
SHA256
f0b2f6dba1f6780f41fb09bb623ffb82efcc6c57ba8e44c655cd00042729a487
-
SHA512
9541bb873082eb1bc6469149112467eac414ca37d3b19da49594c2479435b39623432d7b6db5681867d3146108186ddda0ea7e33d05f320b9e179db9f13cf0f7
-
SSDEEP
98304:59rW4xPWrmbA9zyULG+TjlaJD0lVA9zyULG+1p3ErvA9zyULG+TjlaJD0lVA9zya:NPWtzLqyEalizLqu3O4zLqyEalizLq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1aff03cd57cfc8e5fe3abc10bbb4df32
Files
-
1aff03cd57cfc8e5fe3abc10bbb4df32.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE