Behavioral task
behavioral1
Sample
faf36fbab46cc596b9c3259c2a5638ba2cb59b93fd9b35ac821ec8937cb25e29.exe
Resource
win7-20230220-en
General
-
Target
faf36fbab46cc596b9c3259c2a5638ba2cb59b93fd9b35ac821ec8937cb25e29.bin
-
Size
4.3MB
-
MD5
119856616a03ce792837fc0f0462b110
-
SHA1
3e5550cf6cd3efe479407f52d847c3972e8cd6f7
-
SHA256
faf36fbab46cc596b9c3259c2a5638ba2cb59b93fd9b35ac821ec8937cb25e29
-
SHA512
8428cee6a42856ad44d9e01a343bf5cd3570abbde6e764a69f679ede16f1a101c214ec6a166ab4a81619a2d4153bd40732a931e68867a2c3b6243c4fc89c05f6
-
SSDEEP
98304:TJG/4T4uQQMNUyB0ame5G11D2TFlHYW8IogWV6YrSCEVJhgfM+oKDF:TYuQQMOyfX4bDoBQvVXSCgJ+fSK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource faf36fbab46cc596b9c3259c2a5638ba2cb59b93fd9b35ac821ec8937cb25e29.bin
Files
-
faf36fbab46cc596b9c3259c2a5638ba2cb59b93fd9b35ac821ec8937cb25e29.bin.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 10.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.3MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE