Behavioral task
behavioral1
Sample
22b85a86d2e649642323c0dceec63d22802db64bfe3810e5f1143e114ff59826.exe
Resource
win7-20231023-en
General
-
Target
22b85a86d2e649642323c0dceec63d22802db64bfe3810e5f1143e114ff59826
-
Size
1.9MB
-
MD5
404c3e99710bbfb63122e8255dd6ac47
-
SHA1
26e10efc88d516e8cf534198c956be1bfc590d15
-
SHA256
22b85a86d2e649642323c0dceec63d22802db64bfe3810e5f1143e114ff59826
-
SHA512
0fc3de7c8216bd23a9a0e9949d5bf137a11accb88161220573e2b58b6bd60ef8a2454feee5209bcddea36ddded412ff9c095c1a612ff409043f483eb50d9eddf
-
SSDEEP
24576:irJRQDXz6ScnkCN4E84MVyFROnBmRHlSqUMVUkT/+z1o612m++K7jHxUuzXSAaEM:SMz9FHQFUYRF+OUE21V1U7L7SAvM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22b85a86d2e649642323c0dceec63d22802db64bfe3810e5f1143e114ff59826
Files
-
22b85a86d2e649642323c0dceec63d22802db64bfe3810e5f1143e114ff59826.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 122KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.opcandy Size: 293KB - Virtual size: 296KB
IMAGE_SCN_MEM_DISCARDABLE