Behavioral task
behavioral1
Sample
1c0faadcce4fbbdd12f00553e3d64480N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1c0faadcce4fbbdd12f00553e3d64480N.exe
Resource
win10v2004-20240802-en
General
-
Target
1c0faadcce4fbbdd12f00553e3d64480N.exe
-
Size
110KB
-
MD5
1c0faadcce4fbbdd12f00553e3d64480
-
SHA1
e98edea5e5589cc0c0c707fdec4d460b53503570
-
SHA256
38d55cd12ad4490fbc8eb71e78a5ed17a69ad009596a34c468a113c6b65211d5
-
SHA512
93872e7d8466ebce63f71d63f7ce5c5e2ab18867a065806b2a374077e31dce5f315fd3ba9ce0e2665dd5d73d6355bd258501e9416debe80fa0d9447c5435702b
-
SSDEEP
1536:V7Zf/FAxTWoJJ7TTQoQv585bTW7JJ7TTQoQv585c:fny1oRv585koRv585c
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c0faadcce4fbbdd12f00553e3d64480N.exe
Files
-
1c0faadcce4fbbdd12f00553e3d64480N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE