Behavioral task
behavioral1
Sample
028130d9831bd431eca7521d1ed9a6a4.exe
Resource
win7-20231215-en
General
-
Target
028130d9831bd431eca7521d1ed9a6a4
-
Size
920KB
-
MD5
028130d9831bd431eca7521d1ed9a6a4
-
SHA1
62ea7a0d90143d153a3e12c98582251097a1f02c
-
SHA256
b0e1ac13ceb3cc5cb8188b1ad1071bf2ddf0da34f033e16ae37b415f46fab472
-
SHA512
c79ca267febbb3f46d3f86c3a83a6dfbc83c0c035a2e324ed6a273a720e84e530613330b09065a6c1ca66bcb0121b741181df48c1c61557badf3331a546b9074
-
SSDEEP
3072:0Dy+IvWylpIB7lxjn7wq6xwLc4hYZ4z1sxtbjIUWnoRziou:AevdI3x8q6KLcDZ4zytbLGo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 028130d9831bd431eca7521d1ed9a6a4
Files
-
028130d9831bd431eca7521d1ed9a6a4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 204KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 74KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE