Behavioral task
behavioral1
Sample
1a20e2d8b18b1ab671e8f51bf6e31771b66192cf99f1fc9ab8d5c12e1061a026.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
1a20e2d8b18b1ab671e8f51bf6e31771b66192cf99f1fc9ab8d5c12e1061a026.exe
Resource
win10v2004-20240802-en
General
-
Target
1a20e2d8b18b1ab671e8f51bf6e31771b66192cf99f1fc9ab8d5c12e1061a026
-
Size
655KB
-
MD5
8d8731f6d921ba7b5c20f9860bafeff3
-
SHA1
6a564b98309a4c9298acf8bbc0b6aefee46f768b
-
SHA256
1a20e2d8b18b1ab671e8f51bf6e31771b66192cf99f1fc9ab8d5c12e1061a026
-
SHA512
86472f9546df8aa5616e99b729df6dd8f665140098d7785c53bd4548f4d85fd0c15edc82092c1783678d1863fecd72b7238e1bae920bc652254a4738d2e39022
-
SSDEEP
12288:SKg71yAoHNWR8bTH7MrcuWE/wove/j24yu/ATnZuPESLnV+pFN:1HNJDMor12mquPZjqD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a20e2d8b18b1ab671e8f51bf6e31771b66192cf99f1fc9ab8d5c12e1061a026
Files
-
1a20e2d8b18b1ab671e8f51bf6e31771b66192cf99f1fc9ab8d5c12e1061a026.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 3.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 653KB - Virtual size: 656KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE