Behavioral task
behavioral1
Sample
16590226429e81d9fbe5cf15056d756f.exe
Resource
win7-20231215-en
General
-
Target
16590226429e81d9fbe5cf15056d756f
-
Size
784KB
-
MD5
16590226429e81d9fbe5cf15056d756f
-
SHA1
72d2c8415fa5abecef2a0d8820a295c14aeabcd2
-
SHA256
3228e12ac3b39c6f1f2ae1bb4cd420e3ce86e1986f20a8015bf7988641960288
-
SHA512
07d691fab5caabeaa9c9945c9c74dfa3b2d30ee577b67b85ee64d0b2edac05717f4db80fc8e3ced8ba32a67725801867a6bb6c9721556ae9d24e1a234b419967
-
SSDEEP
24576:YEDwh2FQb/tlHgczmLLuDOuU4qe8eq9tzhhUZ:RUUFQrtFgAm/W73qXRzhhU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16590226429e81d9fbe5cf15056d756f
Files
-
16590226429e81d9fbe5cf15056d756f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE