Behavioral task
behavioral1
Sample
Malicious_14bdf302d16605046322c3a6fc55e16d3c8ef0ba318b318c083daacbba3e258a.exe
Resource
win7-20230712-en
General
-
Target
Malicious_14bdf302d16605046322c3a6fc55e16d3c8ef0ba318b318c083daacbba3e258a.dontrunthis
-
Size
3.9MB
-
MD5
538f38c03cf1bc6dd7a14961a6968b9c
-
SHA1
65c1172bab0bf85ed661cdf2006696527779fbad
-
SHA256
4f973f3a5296ae69a382ffb54da89661c660a8348d781eb9c268f5eb20c441f8
-
SHA512
6015f266f2117d6b09ab742315f4d81cf3fb1ac2693bfaca9c814241337b10e26bf2bb413e92e52554d3f125e8da89b060c4a7112fc7ece71a8df9e3b24746b3
-
SSDEEP
98304:4kpOWzJrMHGo5Bp+6IOYMCT2oOB9sQJ7OW24JRTlnJ:hPzJ4Hj+IYMK2zB9tJ712yRv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Malicious_14bdf302d16605046322c3a6fc55e16d3c8ef0ba318b318c083daacbba3e258a.dontrunthis
Files
-
Malicious_14bdf302d16605046322c3a6fc55e16d3c8ef0ba318b318c083daacbba3e258a.dontrunthis.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 512KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 277KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE