Behavioral task
behavioral1
Sample
74eaa5fee8f50aee41142452ab441a20.exe
Resource
win7-20231215-en
General
-
Target
74eaa5fee8f50aee41142452ab441a20
-
Size
1.5MB
-
MD5
74eaa5fee8f50aee41142452ab441a20
-
SHA1
4000933f7ff062cde5e0cd303d3494db39815ebe
-
SHA256
5d1044fbb4153d41b7b280d704bbdb8e6901b3e17b72e0928090149e97f45e7c
-
SHA512
7f7ec578b8439f0f0842bad43653ccb696dea0189fe53cb0f86547a2dee950a5c698d4b098fb6bacfdfa3bbb36e5856570952a9f4b3ef0934a4331db9c17fc35
-
SSDEEP
24576:YFaIUvBzdLIEtohYRS0Bfv4w2+g0vSoq2z3b1vZzszQE5bOl14kbKFAMn4WR1opq:aaLI+nSs4t+g0vlhhQzQEVOl1z4Jni
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 74eaa5fee8f50aee41142452ab441a20
Files
-
74eaa5fee8f50aee41142452ab441a20.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE