Behavioral task
behavioral1
Sample
1b527eed5b5270fd1c9bfc38e42a0d34.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1b527eed5b5270fd1c9bfc38e42a0d34.exe
Resource
win10v2004-20231215-en
General
-
Target
1b527eed5b5270fd1c9bfc38e42a0d34
-
Size
377KB
-
MD5
1b527eed5b5270fd1c9bfc38e42a0d34
-
SHA1
f18e17238382f56bd485fc2218d5f2f08d347914
-
SHA256
02028d59339915f21377612391da462541ae3cfc95e8bd6d7f0d957bb1d3535d
-
SHA512
f7d5d4453b9515e1fcf074eb7455f9ec2e2c547a1e30a40392d10c88c5ff88517ac63a000a10c317b541b4ce43cc6b2a219eba76b1a3b8dc6bae6ffa08504260
-
SSDEEP
6144:/Q1wJa4IGFe1LJBFA/UJQJkdaEcuKlwCbBRJEP0YB5OUUg/Zgre8/39FX+yIE+We:/Q1tvnFA/bhEcuK7brJ6BMUlyre8lFOF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b527eed5b5270fd1c9bfc38e42a0d34
Files
-
1b527eed5b5270fd1c9bfc38e42a0d34.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE