Behavioral task
behavioral1
Sample
1b55b0e4f67f82b6d4a826e5df096d31.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1b55b0e4f67f82b6d4a826e5df096d31.exe
Resource
win10v2004-20231215-en
General
-
Target
1b55b0e4f67f82b6d4a826e5df096d31
-
Size
227KB
-
MD5
1b55b0e4f67f82b6d4a826e5df096d31
-
SHA1
254a3bdea939aff183906b5fa4ce5f5699fe4284
-
SHA256
e4a3f12b9b19c6401dfee15b7b04fab2d10ac7282bcb93c7e368adf166d86d90
-
SHA512
9b632a7fe2193722f2082b51c12137847124c4e0f4e0d1b12a0069ba0b14ffcc88ac4c47535a5033eb893b93b1e5ee9518870fa4b6eb1dc9f4b367c45aa7d2df
-
SSDEEP
6144:5IaxLzVV12BeupRAWAn0bG8sA9qX1OjrE:5IQXIBeFnMG8sxX1mQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b55b0e4f67f82b6d4a826e5df096d31
Files
-
1b55b0e4f67f82b6d4a826e5df096d31.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 691KB - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 587KB - Virtual size: 588KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE