Behavioral task
behavioral1
Sample
162021c82a2eb081e4f420e827d3e3f5.exe
Resource
win7-20231129-en
General
-
Target
162021c82a2eb081e4f420e827d3e3f5
-
Size
1.5MB
-
MD5
162021c82a2eb081e4f420e827d3e3f5
-
SHA1
133f9375b4d313ab83525ae1c68d065e2f1551cd
-
SHA256
9e2057736451b4e62d3e4cdf081440903b482a1329b7e9b0b73f97e8ae37ebf8
-
SHA512
13e039600e96a99264af22fdde3c124d96c845c2522e60526ec424a436e2e3004ffd2952a1243477477951cc43f378ed8384d11e00bf7c23d246e0321f539033
-
SSDEEP
49152:Gk8TioeCLQLqpX/gfOHUfTTEdWSh4VSSGJT:KfY4X/gfOHoCu4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 162021c82a2eb081e4f420e827d3e3f5
Files
-
162021c82a2eb081e4f420e827d3e3f5.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE