Behavioral task
behavioral1
Sample
86e738c8cd450475befd1faebdb054ddcbf61203c8a16d153364488691275c7d.exe
Resource
win7-20230831-en
General
-
Target
86e738c8cd450475befd1faebdb054ddcbf61203c8a16d153364488691275c7d
-
Size
15.2MB
-
MD5
8446d97c94bf2a5c941b4976736b2c80
-
SHA1
629e6fb0e17fb646137fa46f358fc930602c6fae
-
SHA256
86e738c8cd450475befd1faebdb054ddcbf61203c8a16d153364488691275c7d
-
SHA512
12ec1dc701d2d2ca1eea2633ded3c072368de7010ad3933df4910c8367785e848f1a9b0695230b1d1f3fbd75294b6b4b1204cedc3c88cb041b00fa075f9a9c13
-
SSDEEP
393216:lTtlqsOiV4lglBcm0j7KF+yDp7UEzRE1ml8wXoGHy6Z8o:bgsOixcm0ju8Ap4EmwzZ8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 86e738c8cd450475befd1faebdb054ddcbf61203c8a16d153364488691275c7d
Files
-
86e738c8cd450475befd1faebdb054ddcbf61203c8a16d153364488691275c7d.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15.1MB - Virtual size: 15.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE