Behavioral task
behavioral1
Sample
61efe3f6a91e5c6ef31b9c27ced0a0e6f1de73fcf6487b70e1ce69133c0fd99a.exe
Resource
win7-20230712-en
General
-
Target
61efe3f6a91e5c6ef31b9c27ced0a0e6f1de73fcf6487b70e1ce69133c0fd99a
-
Size
1.0MB
-
MD5
48098be8e5ae8010664d2e006cdc8a8e
-
SHA1
70e2042b9b3d52ddd133edd2e6c81f83f2ef0071
-
SHA256
61efe3f6a91e5c6ef31b9c27ced0a0e6f1de73fcf6487b70e1ce69133c0fd99a
-
SHA512
35fd1edcc721f4951dc14edf8ca00e0a9ef8558db599f56f735fb950cbf23de60e2a25ef58cb02ab6cfcaaa88707e8b3e2c2d5506ba34395203d27897d5e5d06
-
SSDEEP
24576:hCXGqiuTPZ54YAFWd815T2M5SwMsA2740a388/YolI5hMJWVY:sXGqiu3EFnP2LcA2va388AiI5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 61efe3f6a91e5c6ef31b9c27ced0a0e6f1de73fcf6487b70e1ce69133c0fd99a
Files
-
61efe3f6a91e5c6ef31b9c27ced0a0e6f1de73fcf6487b70e1ce69133c0fd99a.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1000KB - Virtual size: 1000KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 59KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE