Behavioral task
behavioral1
Sample
216a8e269a0ff886ccd93606b0b04bb27b2ed9f3dda43a40f9d8bb25af7ffd40.exe
Resource
win7-20230712-en
General
-
Target
216a8e269a0ff886ccd93606b0b04bb27b2ed9f3dda43a40f9d8bb25af7ffd40
-
Size
644KB
-
MD5
510c53562c3e4bc0bf294e75e2c78426
-
SHA1
129a37fc94fe8aa9e38d905f2b0b67c171165591
-
SHA256
216a8e269a0ff886ccd93606b0b04bb27b2ed9f3dda43a40f9d8bb25af7ffd40
-
SHA512
2a4162116ac8d9fb53d80e7dae7c27dfbaccf4db90489ed9a86f9670825609a815e46569d5e445f75db118e40926b37aa05c2aec2d6a1e0b376cdfcfd9f02382
-
SSDEEP
12288:YSmxppgkZ1j1BdF5U6TB5mzZe6UWz/A3JXRTWGAlsAac5oST:YSfa1j1BdbUIB5mnRmJXcGAJacv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 216a8e269a0ff886ccd93606b0b04bb27b2ed9f3dda43a40f9d8bb25af7ffd40
Files
-
216a8e269a0ff886ccd93606b0b04bb27b2ed9f3dda43a40f9d8bb25af7ffd40.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 640KB - Virtual size: 644KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE