Behavioral task
behavioral1
Sample
f39008ed86c32cfbe327e621069c38d2.exe
Resource
win7-20231215-en
General
-
Target
f39008ed86c32cfbe327e621069c38d2
-
Size
784KB
-
MD5
f39008ed86c32cfbe327e621069c38d2
-
SHA1
9cbaf4f55d719d314d9c6a5d401f19b1662b321d
-
SHA256
8054eab77fad80702eba59a803bcacc374e8d9f3c61721aa0df96f716c81c29f
-
SHA512
a50d5eaac82e29172f07acd47daab95bcfa910e74c1ab5b9bd28428a295fe5657c42f2c0961a8cdbbe1dec8872e3958178caded2d0eb4a984ab51c3bff625081
-
SSDEEP
24576:9EQGKMEaf47bkLNoxXPhF0UEkFZmZcp/:WZKMXmkLNoxXzmkFZmZcp/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f39008ed86c32cfbe327e621069c38d2
Files
-
f39008ed86c32cfbe327e621069c38d2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE