Behavioral task
behavioral1
Sample
1cf295f70fa6b8b478fb4cf7c7a0d459.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1cf295f70fa6b8b478fb4cf7c7a0d459.exe
Resource
win10v2004-20231215-en
General
-
Target
1cf295f70fa6b8b478fb4cf7c7a0d459
-
Size
3.9MB
-
MD5
1cf295f70fa6b8b478fb4cf7c7a0d459
-
SHA1
aba622f1fd94437155872333b7be9b5d30606a6d
-
SHA256
095d42faf8ec9d93d5e7fbecbe375508b5b3ccb80c738115d7321ab7bcea1af4
-
SHA512
3213f82e3b4837900f3203c5249672c0770706c788eb07875439ce1565681f93f6985ab84c28bf4bc406d7b405e26dce5115ded81557e1329132ef04e3af5969
-
SSDEEP
98304:XyqiIAckknD2i7D3xkOxYwpKe/geXpv1HD2i7D3xkOxYwpKAYyySomD2i7D3xkOK:XyCiknh7FkNqKe4y5Zh7FkNqKAhyS/hY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1cf295f70fa6b8b478fb4cf7c7a0d459
Files
-
1cf295f70fa6b8b478fb4cf7c7a0d459.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE