Behavioral task
behavioral1
Sample
26de98d7bd34b51754385335b6b9d744.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
26de98d7bd34b51754385335b6b9d744.exe
Resource
win10v2004-20231215-en
General
-
Target
26de98d7bd34b51754385335b6b9d744
-
Size
393KB
-
MD5
26de98d7bd34b51754385335b6b9d744
-
SHA1
815a99dacae7ca09d382b5852a209f1fc26e66f9
-
SHA256
58fceaf76465189163613f8847b20f929f81314f469a10c0ac291c88dfe050b5
-
SHA512
b56f2f21e4ddad026ef97d5089424494bdc453c87a3a6baed715722c3177bba1fc887fb36bd5ba385a935cbd36832be896306a806e75c326c0fa4ca0f05fc84b
-
SSDEEP
768:H+4Ou/osiY3Xs+6yX1s4fjs9jehko92j/EP:3Ou33XZ1s4fjs9jej92j/EP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26de98d7bd34b51754385335b6b9d744
Files
-
26de98d7bd34b51754385335b6b9d744.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 364KB - Virtual size: 364KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata2 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE