Behavioral task
behavioral1
Sample
1cdeba0a7b04d40bbd877ef554996c0f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1cdeba0a7b04d40bbd877ef554996c0f.exe
Resource
win10v2004-20231215-en
General
-
Target
1cdeba0a7b04d40bbd877ef554996c0f
-
Size
133KB
-
MD5
1cdeba0a7b04d40bbd877ef554996c0f
-
SHA1
b99f0beadc5a47029289adafff31870f92de154f
-
SHA256
9725de2d7c6dffddb51b4885021dd2dd656a0ab281c3aa5c470792ca404ec1f0
-
SHA512
5d5beb6ccd09adc34ec35e84455d8f89bc9cc87e8c9df3dc6999437e6b1e7d44113c8befc1b8b3c20c40c35986c500be3b5bf6391b8a366f6eb433716fed6920
-
SSDEEP
3072:DNVG8uzKrgbZWUsCnlr6z/F6foNoMb3FRADBRiyFz89sHaOQ:DN+KrK9s4uz/F6fo2Mb3FRADBdFtBQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1cdeba0a7b04d40bbd877ef554996c0f
Files
-
1cdeba0a7b04d40bbd877ef554996c0f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE