Behavioral task
behavioral1
Sample
1b8f41a6019a4fed118e5f18846d5afa.exe
Resource
win7-20231129-en
General
-
Target
1b8f41a6019a4fed118e5f18846d5afa
-
Size
784KB
-
MD5
1b8f41a6019a4fed118e5f18846d5afa
-
SHA1
756c77c7024e83ee0b0d568f21d2d07580081876
-
SHA256
37d9c1b230405ac812aac149a73739029713f050b41dc3c94a380359e7786f6f
-
SHA512
dcf30dba89badaf1fa630ec83dcb3f7592b97acd1916f5adf186d9118e9a398ff85149bd64ff8e8d41f04d90fdc1f9d3a611e7c07078f5cbf4739cd529b820f6
-
SSDEEP
24576:d+A6S2U5zWp280qyybA68Rkwd2wUuQyG:d+AtbS2KyyU68T2BJV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b8f41a6019a4fed118e5f18846d5afa
Files
-
1b8f41a6019a4fed118e5f18846d5afa.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE