Behavioral task
behavioral1
Sample
1b51850ae18f84c31ef5ee4391636237.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1b51850ae18f84c31ef5ee4391636237.exe
Resource
win10v2004-20231215-en
General
-
Target
1b51850ae18f84c31ef5ee4391636237
-
Size
5.1MB
-
MD5
1b51850ae18f84c31ef5ee4391636237
-
SHA1
f99658f2b29edcddf15d0082b918e87034e64346
-
SHA256
68a41e2117e39c93541da0c4fa7f74e55fe492a6c5ffa02883ac7a5171ba2786
-
SHA512
bf250fc32d175eea0cfad51bd38beca058711aeb1a8ab930c988adc1c129faabce6a50d9cc9c6c58a53520f8f73db152357a8eed9c0308da6f9078475372873e
-
SSDEEP
98304:1h8MLmCLH4N/RM3S11qronI0Iy5fKP7grvYLS3:1hCKH4RVa0j9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b51850ae18f84c31ef5ee4391636237
Files
-
1b51850ae18f84c31ef5ee4391636237.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE