Behavioral task
behavioral1
Sample
31aa51d5d733a3f3200f88a128954a75919571f070af997a715bd0f636faae5c.exe
Resource
win7-20230712-en
General
-
Target
31aa51d5d733a3f3200f88a128954a75919571f070af997a715bd0f636faae5c
-
Size
286KB
-
MD5
0e9cb613a4b853e68b355a12f4c50577
-
SHA1
7d7600d886f6e68f48219e3ff50965052e4d9725
-
SHA256
31aa51d5d733a3f3200f88a128954a75919571f070af997a715bd0f636faae5c
-
SHA512
13ccd04576eafb1f47700f4cecd1ca4c2b885455a6847f6fc246c29be6b4f623a0af5d6b352b7f93cecb40779fdca135935ca693108101f0d5a7c53f8e73a517
-
SSDEEP
6144:DqnM+eLSLdibkJcmbss1CqasN56xZ1JU6/h/3hD+HidYuoSN:DqpqSLEkJBCg56/1JUSp65uoSN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 31aa51d5d733a3f3200f88a128954a75919571f070af997a715bd0f636faae5c
Files
-
31aa51d5d733a3f3200f88a128954a75919571f070af997a715bd0f636faae5c.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 580KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 266KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE