Behavioral task
behavioral1
Sample
1c850b926c9946d137b18dde178546361b901b3cca713ef253a812e751737bfa.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
1c850b926c9946d137b18dde178546361b901b3cca713ef253a812e751737bfa.exe
Resource
win10v2004-20240709-en
General
-
Target
1c850b926c9946d137b18dde178546361b901b3cca713ef253a812e751737bfa.exe
-
Size
63KB
-
MD5
2dc70a7e7c2c962da9b30f6bff0a7573
-
SHA1
a3d3e79169ccebccb1867c6c455c8e3e3cedf103
-
SHA256
1c850b926c9946d137b18dde178546361b901b3cca713ef253a812e751737bfa
-
SHA512
555e8b80022d016ac4cd85214c22f251d0931d3044c5f3187fd31b6d76efee16fd874c059d29bd3204bac213508c60914b7453cbc06f97d69183b771a2ee2d9c
-
SSDEEP
1536:QYukTnqIVUpV6B7WFJ7xic4eGGCq2iW7z:2Sn9Vg5P7xirGCH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c850b926c9946d137b18dde178546361b901b3cca713ef253a812e751737bfa.exe
Files
-
1c850b926c9946d137b18dde178546361b901b3cca713ef253a812e751737bfa.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vuI Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE