Behavioral task
behavioral1
Sample
1508e23c01108323d3a28e9ffc3d5a6c.exe
Resource
win7-20231129-en
General
-
Target
1508e23c01108323d3a28e9ffc3d5a6c
-
Size
10.6MB
-
MD5
1508e23c01108323d3a28e9ffc3d5a6c
-
SHA1
59db42cdb69dfe9b37e56babce6548800fa3b479
-
SHA256
66e0a5a31d9e39afa76a7c53528a1495d11263fdbd2e82c42e3b539743e5c09f
-
SHA512
4609e838838a59f9469bc47b5410ec5b6b6bed85635603e6645f40bd20346f45bd5db6720a2342f9e4b2ab6c1713fa1483c60581c7f71ac795a06a125d20e40b
-
SSDEEP
98304:dE35EPEVE35EPEVE35EPE5E35EPEjE35EPEmE35EPE2E35EPE5E35EPEYE35EPE2:u
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1508e23c01108323d3a28e9ffc3d5a6c
Files
-
1508e23c01108323d3a28e9ffc3d5a6c.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 472KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 264KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bldvar Size: 38KB - Virtual size: 196KB
BSS Size: 12KB - Virtual size: 192KB