Behavioral task
behavioral1
Sample
f345764dec8fa961343b4d18b1294e30.exe
Resource
win7-20231215-en
General
-
Target
f345764dec8fa961343b4d18b1294e30
-
Size
784KB
-
MD5
f345764dec8fa961343b4d18b1294e30
-
SHA1
d6989abbb77034ba55ad768fbdd8d31a9a68312a
-
SHA256
4c5277a77b55f868435ea09ff1bbe936331875f0d397e4e11f6d3f09d434196f
-
SHA512
86e0de92f3a68141adfb9cb8c01e7f6fc8b527aa334d554283dadbf78f0171787ba4f47d144cf2945a00e62f3ac110af19db4e66e20d842f6abfee597ad77126
-
SSDEEP
12288:8MHQXQLECwjAR5UOfWwywkx2so1fIWdRRZCxC7qBH/+jpp3JowPmiBl:VHgQyMrLenwTT1dbqJW/tmq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f345764dec8fa961343b4d18b1294e30
Files
-
f345764dec8fa961343b4d18b1294e30.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE