Behavioral task
behavioral1
Sample
1ba5f737266142034a25bba3c96b39a0N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
1ba5f737266142034a25bba3c96b39a0N.exe
Resource
win10v2004-20240802-en
General
-
Target
1ba5f737266142034a25bba3c96b39a0N.exe
-
Size
186KB
-
MD5
1ba5f737266142034a25bba3c96b39a0
-
SHA1
999cadd34c96791774ed1c8d602ca93c6867ba9a
-
SHA256
4b29989e2f0146d8f18bc647a75b0fd7f881882934c538404fb8dc921dbb64fb
-
SHA512
36764a5f70cc53b8c4e42d9f700bb7b928d03e731758dab2684e083f0040dd466f1b16720d1a6030cada32577a1d8e304f533667f9c641c772be609fcb8f6eae
-
SSDEEP
3072:wvs4dDXEGCLElS1Tj4mYWR/R4nkPR/1aVuy30/kQT62OiZzFu47Fupr3DPUv4i:sPDLCL9Io5R4nM/40yE/cpiZxr7FupbA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1ba5f737266142034a25bba3c96b39a0N.exe
Files
-
1ba5f737266142034a25bba3c96b39a0N.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tn Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.f Size: 512B - Virtual size: 4KB