Behavioral task
behavioral1
Sample
f2fa0bdd292baba312f4e24306e67270.exe
Resource
win7-20231215-en
General
-
Target
f2fa0bdd292baba312f4e24306e67270
-
Size
784KB
-
MD5
f2fa0bdd292baba312f4e24306e67270
-
SHA1
c3fbbe9264ae05a6ca778db95d5bad5aebc1c3ea
-
SHA256
f849931a5b9762d0b09cdff49e14043f40457379c16f0ccc92f200ad8cf61803
-
SHA512
3f807cfcd8e281a618cea39a10bca147f740384dffd8e9dc846e3648de0146e7080c9ff2b8ad0224c049e0f4d7ba45d0f5606372c03d3dc6b980ac22e602bcee
-
SSDEEP
24576:oO5yd8ZrcP3NcqC9RAJ76zsB4CB/DujUCNR:oO5m8Zrc/NERAGA8UCn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f2fa0bdd292baba312f4e24306e67270
Files
-
f2fa0bdd292baba312f4e24306e67270.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE