Behavioral task
behavioral1
Sample
866ab4937dcf8203e4c85c0147de259d.exe
Resource
win7-20231215-en
General
-
Target
866ab4937dcf8203e4c85c0147de259d
-
Size
1.5MB
-
MD5
866ab4937dcf8203e4c85c0147de259d
-
SHA1
3d44e45dbd37414abee120307f00a475fc5f1673
-
SHA256
ccf3ada6ffdb90d441a1659e0f232ef01fb169ec54ee910031cab589df602a0a
-
SHA512
16629f9dcb76ebaf67e67e097ce956bb8b1b13534507acc3a2c62b87c03d25fe9edaa4245251a2156d89af1f8902f2991a3c504c33f21719592e0ea8931d4659
-
SSDEEP
24576:vsEBlBk7kKGts1y2Af6BZYf+TYIBa6DYFyhk8PuUPi4oLNOJLB:HkIKc6ASAf+Df4yhpmrZNcLB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 866ab4937dcf8203e4c85c0147de259d
Files
-
866ab4937dcf8203e4c85c0147de259d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE