Behavioral task
behavioral1
Sample
f4822e8f7140f131cdfebedbbbb1a41b.exe
Resource
win7-20231215-en
General
-
Target
f4822e8f7140f131cdfebedbbbb1a41b
-
Size
1.5MB
-
MD5
f4822e8f7140f131cdfebedbbbb1a41b
-
SHA1
9aac8cc9681c70e5a9637851cb1868207a7c0866
-
SHA256
d7525f396d67ae1aca10d2a2421b44009062fac3e7f144e60f898d72a7ae3026
-
SHA512
5decb9f2e40a13f0ed9608cf1ab8448afe4426e4ff874c08321fb6dbe05768e957a021decd2d593a15d8763631cd5c5e3167a315c0a84b5615af98ac49bd02ca
-
SSDEEP
24576:glDNbcYqp3LLPI97v7LEv4wjs/fABnPt2yS+Iug5qvOIZeCaVSg9n7lDgSK/KqR3:glRcz1PgvLEQwqYBbgUOIBwn7QSg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f4822e8f7140f131cdfebedbbbb1a41b
Files
-
f4822e8f7140f131cdfebedbbbb1a41b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE