Behavioral task
behavioral1
Sample
iexplore.exe
Resource
win7-20230220-en
General
-
Target
iexplore.exe
-
Size
4.0MB
-
MD5
a663664313ca8af3e0de40e032efecff
-
SHA1
2a4538cee32e89423749c2f7d206077762d1118a
-
SHA256
352dd0e235aef99f43e4d95cfd0403d518b331cea66b6c4ba7d4adfd415a7c2e
-
SHA512
8ebad38f837d8489549dbf93402923f0824c8980513581aaec019265985cfd9aef980c430a75104c23b89f880be3b709e2f9f11d324283fe4ba0ccc7be489331
-
SSDEEP
98304:fRbj92scwqfy6aBXjDtqFSRfBl0GoNjgwDY7SICUFjhFvY:N92sc3fyjagcVuNHW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource iexplore.exe
Files
-
iexplore.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 9.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3.9MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 83KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE