Behavioral task
behavioral1
Sample
694f68a8f86aaca47117c86012aa7c9f.exe
Resource
win7-20231129-en
General
-
Target
694f68a8f86aaca47117c86012aa7c9f
-
Size
784KB
-
MD5
694f68a8f86aaca47117c86012aa7c9f
-
SHA1
a0fe3a30a931284b577bc26667f2f9d12463a0c6
-
SHA256
b1cc8407c49fa3a6db8ea9f7dac0173bb7539efa0ebd1cb06e3b3e4f696c691b
-
SHA512
922d43a62893e335c556b8f0596aa4754a1cb7095e86242908a1b2183c1c7a39385f4633c8897086086ed2d25e29744687ff271875767ffb569dc2bd6a2d2c97
-
SSDEEP
12288:l4bt8BfO3nVmC/zLrmF3qD5YDaq5Pp7VVrJtHqhernfQTYNfwLg5o3S4ZU+3sXF0:WbtUfO3ngC/tD5Y2Kp5VHxQEN968Xl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 694f68a8f86aaca47117c86012aa7c9f
Files
-
694f68a8f86aaca47117c86012aa7c9f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE