Behavioral task
behavioral1
Sample
settings.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
settings.exe
Resource
win10v2004-20230221-en
General
-
Target
settings.exe
-
Size
433KB
-
MD5
3e8f31c9ada58db95f26731d42d6cdea
-
SHA1
ca01fe4ed34a3c9b2898da80f889d7198b7f045e
-
SHA256
502f13f594b8c7944807bb4193e3f634f0801ffd3c0667e85b4157ff9057080a
-
SHA512
4d99e0b1cbf81ab585ee516522ace0dcfc957ad8cff4057aa532a69bb2cebba4d11dafe7ed415375ffef22121c20d9ea2ee66289c8b633615ebacadab59d4436
-
SSDEEP
12288:fDlSxfXu36j8K2Wv/OcmagFiKlPtVb+HyT36yk1aY:fDuPDRe7uyT36y4aY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource settings.exe
Files
-
settings.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 415KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE