Behavioral task
behavioral1
Sample
1b3dcb1764efcff5d7b482be6b17bbed.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1b3dcb1764efcff5d7b482be6b17bbed.exe
Resource
win10v2004-20231215-en
General
-
Target
1b3dcb1764efcff5d7b482be6b17bbed
-
Size
821KB
-
MD5
1b3dcb1764efcff5d7b482be6b17bbed
-
SHA1
83bef6ec7ec88a8125ebf458a09cad7f9d7b3b6d
-
SHA256
92f4b0dd7fa2d84493586a52b3706d2693b045d1aba8bbd9ce6b85a7a10abf89
-
SHA512
4007bc96196916fcd856a8d137c1bfe1548fa4e064b1483fb4d122ac854040461d7cd3e71ef3c34bcb9f2f1bb194c6b98c42036fd9772c617fb5f4db95e0fa82
-
SSDEEP
12288:vlBwg3m/PX+Jhvz5Fdx8DU/Im5wUSbNetv5rU4BflO9dJ5IECpxOokLZsCtQw1qO:92XAhwUAmuqdcjukL2CDYO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b3dcb1764efcff5d7b482be6b17bbed
Files
-
1b3dcb1764efcff5d7b482be6b17bbed.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE