Behavioral task
behavioral1
Sample
d9fca41561777330a9ce5d2868598bc8.exe
Resource
win7-20231215-en
General
-
Target
d9fca41561777330a9ce5d2868598bc8
-
Size
784KB
-
MD5
d9fca41561777330a9ce5d2868598bc8
-
SHA1
3697f26d2e9a5051c5e3f55a2d92c1f9eb6cf0cc
-
SHA256
4d28213e2fd2142bbd4ca82c7ed3a2161d8bd9453af421524123da3815713778
-
SHA512
ac65e97861a50eb9b1883a412ddd6235164a7f86a12b976752e354d60f00c2a24ac9fdcb04e782fe1398311af7aca17cd787d46cc0426c21a674845148d50a16
-
SSDEEP
12288:clUzEsuKAGsuWARoYN9FVSkyZarcXNrH3g1ZRZjbnRNkFHhx09XlOtXNRt9CFiJr:5upKoYNVSvZage1ZRhzROaXgtrtQna
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d9fca41561777330a9ce5d2868598bc8
Files
-
d9fca41561777330a9ce5d2868598bc8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE