Behavioral task
behavioral1
Sample
607fd48b1999ffac074d6459e10c8e05dfcca89dd098212c1ec605f0591bdcf3.exe
Resource
win7-20231020-en
General
-
Target
607fd48b1999ffac074d6459e10c8e05dfcca89dd098212c1ec605f0591bdcf3
-
Size
389KB
-
MD5
f73bb049278e2780e33d8c5c3628af23
-
SHA1
80c80d83d95a5fee4a3a6d82ebadc2cdbefa4a54
-
SHA256
607fd48b1999ffac074d6459e10c8e05dfcca89dd098212c1ec605f0591bdcf3
-
SHA512
4c042b14807535249419da7ed1c695e739a86b5390e8a62899ec3ee194d7f400ac883f19debd116eb4c7af1cbbafe4bac26037cff291cd9f839fa48653969f0f
-
SSDEEP
6144:zGz0wJUkCpNL+oSr+i67Cvk92aBJL0Z3rKAjV9N7:klqkCn+oSaimCM92jpR7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 607fd48b1999ffac074d6459e10c8e05dfcca89dd098212c1ec605f0591bdcf3
Files
-
607fd48b1999ffac074d6459e10c8e05dfcca89dd098212c1ec605f0591bdcf3.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 412KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 333KB - Virtual size: 336KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE