Behavioral task
behavioral1
Sample
fcbb4e413a6ce55b9e6a23b5840da189.exe
Resource
win7-20231215-en
General
-
Target
fcbb4e413a6ce55b9e6a23b5840da189
-
Size
784KB
-
MD5
fcbb4e413a6ce55b9e6a23b5840da189
-
SHA1
222d7013b883c8574f6ca542b07f0cfe5365c1f0
-
SHA256
0a51eee748b9af7da87e2a0aa452b24ce25673a1c914e8e4099257799f1c057c
-
SHA512
e9b39fff2e4cd77529422b6ab0aa75e8fbf4f8c63d951c3f303edae9690a56b7e5f931403858cca25087f8c832a4999e4de397cd571deccab7337f6cb4de6c56
-
SSDEEP
24576:X0jbOCpKlYLLGboFGDa7Qj44pXnW2eNxrc:+PckKgWKQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fcbb4e413a6ce55b9e6a23b5840da189
Files
-
fcbb4e413a6ce55b9e6a23b5840da189.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE