Behavioral task
behavioral1
Sample
1bbbcd6a900e5bf467eb5d632ae0c285.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1bbbcd6a900e5bf467eb5d632ae0c285.exe
Resource
win10v2004-20231215-en
General
-
Target
1bbbcd6a900e5bf467eb5d632ae0c285
-
Size
2.6MB
-
MD5
1bbbcd6a900e5bf467eb5d632ae0c285
-
SHA1
82e5d86aeaf7735444bfd5f1059b4bc3598ccf10
-
SHA256
2257f27a634c152a0492fece606e183c0a2be4c64297f547d082c9bb562cc9f0
-
SHA512
eec9feecd04abd06218e1be5870a0a58f5aa5a32089a6760a87bfeebdaa0bee4343d75605483dd93c4988a01f1d293587d497457683cf7081b455bb3cd62929a
-
SSDEEP
49152:Cd4v+fmQSSmneS9ghQDK2vhBfb7EPUOt0jdWy9MCkaUdTay3:dYmGmneyHvFRk3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1bbbcd6a900e5bf467eb5d632ae0c285
Files
-
1bbbcd6a900e5bf467eb5d632ae0c285.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE