Behavioral task
behavioral1
Sample
1d8804d5cef6772e10468c46e977c96a.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1d8804d5cef6772e10468c46e977c96a.exe
Resource
win10v2004-20240508-en
General
-
Target
1d8804d5cef6772e10468c46e977c96a.bin
-
Size
123KB
-
MD5
1d8804d5cef6772e10468c46e977c96a
-
SHA1
0b1ffbbe6798d3c098092f7008a134abd77394e3
-
SHA256
bd90179acb807ef41a2f64929f1140af25bda238b93cc7ad92d0d46c744680f8
-
SHA512
e70f8e5668bfc27fad705f5b015216ca9a6a3e9d2086f462dc462f96e9156fe5e569cd4ef0333938e993988bec4475e4c717c8312a1851843f491d52530231f4
-
SSDEEP
1536:5BGAGNvAw9etZzdY2NatgLbMDWNajogq1LJNGKLzfq4ISa:2NIFq2N3vnF1LJU2ISa
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1d8804d5cef6772e10468c46e977c96a.bin
Files
-
1d8804d5cef6772e10468c46e977c96a.bin.exe windows:7 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE