Behavioral task
behavioral1
Sample
1b0056ce01684d642afa6b175c649729.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1b0056ce01684d642afa6b175c649729.exe
Resource
win10v2004-20231215-en
General
-
Target
1b0056ce01684d642afa6b175c649729
-
Size
2.7MB
-
MD5
1b0056ce01684d642afa6b175c649729
-
SHA1
a752df4bc38894b737ba57683ee0588f3638fb0f
-
SHA256
52d31680d595837c1f3d95dcbeff7e9f851dc06862547663e55ddf9a8e642a95
-
SHA512
0d69885e4d778fb2653bf2d8b213ba5d0c5716ad7ddb733a9baa8c3e6d17c8519e81d36af062aa8b2dad7460fa6e7dfe6c198b80b834091fbbc2fab68c6ee1e2
-
SSDEEP
49152:7Z1i2RwnV+2Vlgwr1nefMrG63k7eyd3aHUKjwFNp4:N4E2VlgwnefMBU7ee3bkK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b0056ce01684d642afa6b175c649729
Files
-
1b0056ce01684d642afa6b175c649729.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE