Behavioral task
behavioral1
Sample
1c69b35e604fd477e36d7d1f8b55b475.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1c69b35e604fd477e36d7d1f8b55b475.exe
Resource
win10v2004-20231215-en
General
-
Target
1c69b35e604fd477e36d7d1f8b55b475
-
Size
1.6MB
-
MD5
1c69b35e604fd477e36d7d1f8b55b475
-
SHA1
231a9f4572fb69f988c8971357102b8544ccd8ad
-
SHA256
c0f5d2d61d1ff5837e8cef7a7ae40dd5830cd4789c0c7971ed777220c817eb38
-
SHA512
54b2c4e403e9ba882354f255d1af9572e4b77e2dcacd40911645f8ba8b37254bc1332ad4a16258a1468accaeb94b7136e45504f699205c18afe36ff1583a20fe
-
SSDEEP
49152:Du6ftPxv8scakLz0naCZD5h7n5AlyimQcakLz0O:S6f1xv8scakcnaCZFhelyimQcakcO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c69b35e604fd477e36d7d1f8b55b475
Files
-
1c69b35e604fd477e36d7d1f8b55b475.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE