Behavioral task
behavioral1
Sample
1b3de5e265bbd6c00c215dfd00cb6567.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1b3de5e265bbd6c00c215dfd00cb6567.exe
Resource
win10v2004-20231215-en
General
-
Target
1b3de5e265bbd6c00c215dfd00cb6567
-
Size
133KB
-
MD5
1b3de5e265bbd6c00c215dfd00cb6567
-
SHA1
dba7872fa02c8274664b5671e531c793b33ca815
-
SHA256
6a44c17504973b6092fa899ef025f9e27aa319ddc20bd9cdca18404ae9d56c79
-
SHA512
075a386f2a034d2107565877616fedb9573e9e36fc5131cc8972133a5f0627b4fea70c12fd1f92a89542a0a66a89508393f2efcb6745d1cb7c52b6d76f5f601b
-
SSDEEP
3072:o2UWbS5KEmvzAMrdByM1wGSUXqsSsOh4b/RIa8R+qRsnIv9oQ:o2UP5KhAMnyM1dS0OhnaIwIGQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b3de5e265bbd6c00c215dfd00cb6567
Files
-
1b3de5e265bbd6c00c215dfd00cb6567.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE