Behavioral task
behavioral1
Sample
26dbca434598c9f349906d8c0b49e5c0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
26dbca434598c9f349906d8c0b49e5c0.exe
Resource
win10v2004-20231215-en
General
-
Target
26dbca434598c9f349906d8c0b49e5c0
-
Size
1.5MB
-
MD5
26dbca434598c9f349906d8c0b49e5c0
-
SHA1
0aa5b6fd352e7bd0c41a8003994ad867a53e9841
-
SHA256
2fa1074e0c70c1be0e4faabadf93c967ae15eb73870d191b32484c653320627e
-
SHA512
9f2a84ac711acb1a42fe90d3c10d0d7a297a292d44005ba82ae6a57878dea6de0a698439db4feb50d5a218d677c7b30ee9f5510f88dc5104101b89e861e2840b
-
SSDEEP
24576:/u9wLrslihzjNLkFC+sYoulAi5YQDfW6QYUJlnXIJYDfiiXfW:2acAvkFCBY1+LvuUrXHThXf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26dbca434598c9f349906d8c0b49e5c0
Files
-
26dbca434598c9f349906d8c0b49e5c0.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE