Behavioral task
behavioral1
Sample
26a4ce9dae442ec9094e94eb9c0d2b54.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
26a4ce9dae442ec9094e94eb9c0d2b54.exe
Resource
win10v2004-20231215-en
General
-
Target
26a4ce9dae442ec9094e94eb9c0d2b54
-
Size
1.8MB
-
MD5
26a4ce9dae442ec9094e94eb9c0d2b54
-
SHA1
ed7002eafa98e22e2a6d04d0c1bcbfb634df0d33
-
SHA256
1c90be61e2cd9b19d0d2e46fc0fe5a596e8c2af4a12326c97dbd93dd57a9f5be
-
SHA512
dba8d8159923401337b11be497bd560642cc3722e1f7e1d8232ad0f730788c1754bf3db038396df11f75abed040697f568b63908e20b54e782a1b153b19ebb30
-
SSDEEP
49152:hWH9w9WtvNSzV3LyEu5JbZPYMbPsKh5FWAWTlzowPvy:sH90SviJXs91zhWLxbPK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26a4ce9dae442ec9094e94eb9c0d2b54
Files
-
26a4ce9dae442ec9094e94eb9c0d2b54.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE