Behavioral task
behavioral1
Sample
Sheld.exe
Resource
win10v2004-20230915-en
General
-
Target
Sheld.exe
-
Size
189KB
-
MD5
61009a1b6b804783139cfa6ac36e5e18
-
SHA1
d29efa9cd8b8bac1c8fb2990c12690ec37eb04ad
-
SHA256
bc03b448d6f3a37dac0b11564e4eec5721eb7a94b711753d3c98cfe33ce371e5
-
SHA512
c2c1dedef07c34c8009cf1e54da0e1b077f94635d9f30b7954003fb4d71b8bcbb36df258ab885f229893c03bc24b50abf0bfa43676180d6e9e7498e0f7369041
-
SSDEEP
3072:sVZ/VGS7rN+z3DgiMDs7eYb91lGlo4FxgRNMMAol+0QENnoutk9qahH:sV28ozTgiM3S70laKMAol+UnoSWq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Sheld.exe
Files
-
Sheld.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 165KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE