Behavioral task
behavioral1
Sample
68854d2d1dea7536e4320cef8e45d220_exe32.exe
Resource
win7-20230831-en
General
-
Target
68854d2d1dea7536e4320cef8e45d220_exe32.exe
-
Size
452KB
-
MD5
68854d2d1dea7536e4320cef8e45d220
-
SHA1
8e2172f9f5ed37f323a145d4864d839a931af992
-
SHA256
6426f43e79d2f1f3ad24a1e5e8c10732959bd4e46821b99612cd27bfafc0c16b
-
SHA512
409c7f368fbe4c1183c13c72df8738a7f7f96e97fe47d79a58f7ef6c15e4d13aba7b2468cfddf5886988287952e7ddac536686140d07997ea796b42b34cd80bb
-
SSDEEP
12288:64wFHoSJ1zBR/p2r8Cnkhdar2oGNLty6SDXaXIKJcnsjs0STADuO1ve5yqhH:MtBR/Mr8Cnkhdar2oGNLty6SDXaXIKJm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68854d2d1dea7536e4320cef8e45d220_exe32.exe
Files
-
68854d2d1dea7536e4320cef8e45d220_exe32.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ