Behavioral task
behavioral1
Sample
374dbadac2b132aee7ddfb5ad5a29634.exe
Resource
win7-20231215-en
General
-
Target
374dbadac2b132aee7ddfb5ad5a29634
-
Size
784KB
-
MD5
374dbadac2b132aee7ddfb5ad5a29634
-
SHA1
415206028c626e6c5d82e6b43ba2c3e781178a18
-
SHA256
19607f4ff04f18e11d8ec7a25d51887fd0963c8dffe091884fb43ae4d17ea0d6
-
SHA512
eec295414decde0ea930d6c8b9f6d25c7584b84e25684517c677bc2a9923aaecea000a08ac2dda9ecccb286c25a067386a1f793dd73ec68bcf3f7910f4a037b1
-
SSDEEP
12288:WKFi0XQxo8ISXpWx2zbI+V1GYvpFJ9oToPBP4QRheTnBADZFs69Mu:hgXxGqWxYL/vRxPBP4QzecZFs7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 374dbadac2b132aee7ddfb5ad5a29634
Files
-
374dbadac2b132aee7ddfb5ad5a29634.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE