Behavioral task
behavioral1
Sample
test.exe
Resource
win7-20231215-en
General
-
Target
test.exe
-
Size
44KB
-
MD5
ac1cb555b8e49feaee1142d858d54e2b
-
SHA1
fce3f7786fefcd6de09dc3e1a7d74cca694d1fe2
-
SHA256
414f9b91e2022adb2414f3c829ac445afbf7b515b6e1ae5c08ac7250e122ac6c
-
SHA512
2522c077d3684c764f13188b04c72147851d59725a17a8092525ff98128e1dc24bd9edf2ecd9f885752a3ce2a11091596a1860abf7a16dc7381778f3ec796715
-
SSDEEP
768:rmOhplcsHvKWzX6HJmFqda7ko6HuEKiZov0wsdln7r1TiQ6hNLHIMfe/wnbcuyDd:iOhplcsHv1X6n0YO5wov0wIln9TiQ6bm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource test.exe
Files
-
test.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 100KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE