Behavioral task
behavioral1
Sample
d292c4c328770731fe97b15eeea6159f.exe
Resource
win7-20231215-en
General
-
Target
d292c4c328770731fe97b15eeea6159f
-
Size
275KB
-
MD5
d292c4c328770731fe97b15eeea6159f
-
SHA1
56e4475ac8e8e52dfa71c3652defcc4e64013885
-
SHA256
429c78186521b259a3044b186eed2b0959a9acb877b55f89dec2d55d94352e5e
-
SHA512
5db4511148650a3ccc9ec58b2b6d0209cd98f7b6fb7f07e7beba1cfbb3d200253c2bce50f8a312093478baf8f67027cb98998b6c61925a90bb9b531bc69175cd
-
SSDEEP
6144:tRh/WhbQtlu1ncCNnM2aodWYcXWBuJM6qxcjZJZZxAirPMAoSY:tRh/WhbgluuCZMHoAxXWBu8MT3oSY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d292c4c328770731fe97b15eeea6159f
Files
-
d292c4c328770731fe97b15eeea6159f.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 416KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 272KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE