Static task
static1
Behavioral task
behavioral1
Sample
uBp1DxNGN28IYUZ.exe
Resource
win7-20231129-en
General
-
Target
uBp1DxNGN28IYUZ.exe
-
Size
591KB
-
MD5
c9d5f9d20dd66ef3e2329b8a26f01af8
-
SHA1
d28d94662a5e84ad0ae68f35979782fa3344304c
-
SHA256
3cadb32dafeb421b94c09ca30944385141cbd4b032589b92bac948f27c287dfd
-
SHA512
3d54cb4223610f8e15336101dc946a533f839ec6d0d55a8a4143a8e99bf4bf3f0e70aacad80a5dee62619f19bbda845e6a65b76f0d10ab5d52feac2bb32b7dd1
-
SSDEEP
12288:luarYCFd6xuo/q3dk4vD7PDFoHBQKjX2q+hS1uv4S/LNApBxO:z81xTy3i4v/DFoHBTQh+uv4S/pApBxO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource uBp1DxNGN28IYUZ.exe
Files
-
uBp1DxNGN28IYUZ.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 583KB - Virtual size: 582KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ