Behavioral task
behavioral1
Sample
1c4ad92ed4414b2d2e0a63d2b72c0c48.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1c4ad92ed4414b2d2e0a63d2b72c0c48.exe
Resource
win10v2004-20231215-en
General
-
Target
1c4ad92ed4414b2d2e0a63d2b72c0c48
-
Size
124KB
-
MD5
1c4ad92ed4414b2d2e0a63d2b72c0c48
-
SHA1
f97a8b22ac41b14754e99b9365e07309cb8ae8b6
-
SHA256
73e749ecb91035481ef8ed4a3f6769d9a5bdf2f6527ccaff5cc12c095d82abbb
-
SHA512
3059ec44e256b05194338cf8b447683823bb282f37a638f3453075f2d643ef8026120144153c9a9c960dd6d79ff8800cb3e01c7f8c6f3ed360435d152eb11128
-
SSDEEP
3072:eIZa0b9oOG1FYMN5XFEIFCOV/cX0JV2WC2Eouti:4Q9oL1mMHFEIFx/cX0JQ5PoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c4ad92ed4414b2d2e0a63d2b72c0c48
Files
-
1c4ad92ed4414b2d2e0a63d2b72c0c48.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 784KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 115KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE