Behavioral task
behavioral1
Sample
fcbe3875b6e1fc1915247d6c9f6294f7.exe
Resource
win7-20231215-en
General
-
Target
fcbe3875b6e1fc1915247d6c9f6294f7
-
Size
784KB
-
MD5
fcbe3875b6e1fc1915247d6c9f6294f7
-
SHA1
30cab9c6532725d8fc00558ae29e28ab2e54276b
-
SHA256
4c23649b929a3ca508a1983206b55eca3ede4c61b106e4b9464e010de5ff9c98
-
SHA512
8556556f4e80071dbe7134c0cc69b33ebab5260c072fe4fdca2b98e95d91a659a3d7047d21a02d807ecaec843af0b67bc5743fa0d146d6bf0a126c6425201862
-
SSDEEP
24576:GRM8GHup9A97zctBaJUs6+mtMtGx1hz5W:+M8GHyq97zWsEtMtGx1h9W
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fcbe3875b6e1fc1915247d6c9f6294f7
Files
-
fcbe3875b6e1fc1915247d6c9f6294f7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE