Behavioral task
behavioral1
Sample
1b9ecf844d86abc8c761a857cc16c6ca.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1b9ecf844d86abc8c761a857cc16c6ca.exe
Resource
win10v2004-20231215-en
General
-
Target
1b9ecf844d86abc8c761a857cc16c6ca
-
Size
1.5MB
-
MD5
1b9ecf844d86abc8c761a857cc16c6ca
-
SHA1
93e4c6fb43d6345ecec725a7598e6aedfecc5167
-
SHA256
bc3eb694f6b022ab7cc177a8616de50875e4a1c7c7b6932ef26ae73f39d8b14e
-
SHA512
2aaae1e9e6be3fe44c090925aaef6ec29e80c6687067e4b272fd2603f7e08d832e000bd8089e9c42215122e017ec789cb53cd9b808bfe770cf72b64e6f625d34
-
SSDEEP
49152:37LUIaPRcGhuQ334aONQwFZpvF4VJVD93UBm+Dtrf:LLruGPcoaSQw4TZe4+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b9ecf844d86abc8c761a857cc16c6ca
Files
-
1b9ecf844d86abc8c761a857cc16c6ca.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE