Behavioral task
behavioral1
Sample
413974a471448a5eb84b49a18b93cc80_exe32.exe
Resource
win7-20230831-en
General
-
Target
413974a471448a5eb84b49a18b93cc80_exe32.exe
-
Size
452KB
-
MD5
413974a471448a5eb84b49a18b93cc80
-
SHA1
ba41caa8ef45a196490213a672faa3a38531a530
-
SHA256
da82c25335fae3fe209426e0eb623c7c66bbacb0f68ae4c99c6b74a3cc48076e
-
SHA512
5144b64a6ba2b598bc3c9266fb00dcb65a7a8c4b030c344458a67ef846b20b507d37792f6bb963707eb4fb7acfecec6c56df0887cdbcac65e08a0858543349b3
-
SSDEEP
12288:64wFHoSJ1zBR/p2r8Cnkhdar2oGNLty6SDXaXIKJcnsjs0STADuO1ve5yqhD:MtBR/Mr8Cnkhdar2oGNLty6SDXaXIKJs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 413974a471448a5eb84b49a18b93cc80_exe32.exe
Files
-
413974a471448a5eb84b49a18b93cc80_exe32.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ