Behavioral task
behavioral1
Sample
85c9b929432298d6876199812.exe
Resource
win7-20230621-en
General
-
Target
85c9b929432298d6876199812.exe
-
Size
3.7MB
-
MD5
c2bc0b03f509e8b1fbe306b6d7d53933
-
SHA1
9f47ffd16560f11eadcc04b1e4215ae4920ba3b2
-
SHA256
85c9b929432298d6876199812c745fa455d86d70062c1c34e222d7871d7d6836
-
SHA512
da19bcb06e19a361bdd9c79e176b2efa3448a00e84f0e2cb1a04bc9490ca2036d4bbe60f3ee68f499872e5a8ff0395823d657d500a277b3de662375f33ae6b8c
-
SSDEEP
98304:+uEvf/eCos1UD/CMhkAdiB99YhiwR6VsVgr7wA0Eg:+uAusshY99DY6VsVmD0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 85c9b929432298d6876199812.exe
Files
-
85c9b929432298d6876199812.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 9.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3.7MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE