Behavioral task
behavioral1
Sample
131cb4bac07a6c0bb62b99c3436e9ed7.exe
Resource
win7-20231215-en
General
-
Target
131cb4bac07a6c0bb62b99c3436e9ed7
-
Size
1003KB
-
MD5
131cb4bac07a6c0bb62b99c3436e9ed7
-
SHA1
b6c462824f587a84c42552f62e47d9c8c245d738
-
SHA256
71f2090aa6bf7d3a01ee849d171ea53fdc78e04e128eeee81792929290bce062
-
SHA512
00664bc86960ba26e3034e3313951f836b0eda855e49c77e3aee868f792335e1df2814caac3a11aae54024d1dfd3d65f73f63b850534f13ce07ecec474040952
-
SSDEEP
12288:Iv/HDkCCLbxmUwRT+k2+qyhhvIm/2YoSHUabaiVqJqlTwkzp/h3GX:kgVbxmBRL2lIvLkanVd/tu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 131cb4bac07a6c0bb62b99c3436e9ed7
Files
-
131cb4bac07a6c0bb62b99c3436e9ed7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 568KB - Virtual size: 568KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 166KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 267KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE