Behavioral task
behavioral1
Sample
391c897afbb1b4a24fe26c332a7cb700_exe32.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
391c897afbb1b4a24fe26c332a7cb700_exe32.exe
Resource
win10v2004-20230915-en
General
-
Target
391c897afbb1b4a24fe26c332a7cb700_exe32.exe
-
Size
125KB
-
MD5
391c897afbb1b4a24fe26c332a7cb700
-
SHA1
a5b90864ee7e965caf09ff67bf48becb8784eda2
-
SHA256
f223d32ec929d8e26710d918d927d89f57d6c4356d3a6c631f6b88ceddae7cc8
-
SHA512
779797d49eb31529d40afe7408b4582155ef84cc28a711784acd1c29bee87125968069ca73d598e6adaa90cb26b49368e5e54ed0bd34aaf81e3c6a8301844fff
-
SSDEEP
1536:Fy79c0bIIpusIocpEVk9rzfr/gWLQ9H7NRN6Oi2bwhNrIFnxgamOnBn:079dbnorzD/gYQ9ID2bwhVIFnTvB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 391c897afbb1b4a24fe26c332a7cb700_exe32.exe
Files
-
391c897afbb1b4a24fe26c332a7cb700_exe32.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pb Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE