Behavioral task
behavioral1
Sample
1c8924a3f5384df2101ed55d1dacf112.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1c8924a3f5384df2101ed55d1dacf112.exe
Resource
win10v2004-20231222-en
General
-
Target
1c8924a3f5384df2101ed55d1dacf112
-
Size
1.5MB
-
MD5
1c8924a3f5384df2101ed55d1dacf112
-
SHA1
9ac8d38655e7b7ca5f72891d6f0f50df99c47bd9
-
SHA256
9b47d56675d2d0f0bc28c93a0ddce7eb37265f63d7bdfad21cc5dec677252fb7
-
SHA512
9c85d9ff56d4e46de19f6f77f3bd32f5baa2395eb2e52152811fcb470b7ea4f09c4f678cc6c39537c559620fd8a5c7515c7595797a02e96a173c9f33a8153a03
-
SSDEEP
24576:X2OlkRsXiS0Pu1kPD1IlwC/dXE/FVrT/0tpzZzmg1H5iBdKCfS2ji9v87mq/+NVs:md5S0Pf71MF+CZzmgRsE0Mv8t/+N/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c8924a3f5384df2101ed55d1dacf112
Files
-
1c8924a3f5384df2101ed55d1dacf112.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE