Behavioral task
behavioral1
Sample
1b3c06058780a4b089824bbf603f0969009bbeb165f40b81f27a454c680c881a.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1b3c06058780a4b089824bbf603f0969009bbeb165f40b81f27a454c680c881a.exe
Resource
win10v2004-20240802-en
General
-
Target
1b3c06058780a4b089824bbf603f0969009bbeb165f40b81f27a454c680c881a
-
Size
8.5MB
-
MD5
52b16f4322c4064d72fe354fd4e15f27
-
SHA1
910be6f971bfa3a2c44122ef7ce5e8c27c59ded5
-
SHA256
1b3c06058780a4b089824bbf603f0969009bbeb165f40b81f27a454c680c881a
-
SHA512
56faed11cdbed429be582f9e6a046cd01a3ad1b904fb0954d75a17e9069791bf3d714172855a63a681a89675fdcf357b9d529e9616d365519439f65ef61f777f
-
SSDEEP
196608:Cng3BVh1A+vBtC9Jl6QbfYoPl22KDHbxFedbLE:KMV1/Zt6JtrYoPE2ibze5L
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b3c06058780a4b089824bbf603f0969009bbeb165f40b81f27a454c680c881a
Files
-
1b3c06058780a4b089824bbf603f0969009bbeb165f40b81f27a454c680c881a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 17.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8.4MB - Virtual size: 8.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 105KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE