Behavioral task
behavioral1
Sample
11ef21f234ede5bc176cc49db92d9dd6.exe
Resource
win7-20231215-en
General
-
Target
11ef21f234ede5bc176cc49db92d9dd6
-
Size
36KB
-
MD5
11ef21f234ede5bc176cc49db92d9dd6
-
SHA1
7656d9da404c57c1ce4edf1b26a675e5e916f9f2
-
SHA256
e1718848b61f959f2a323ced7b4b42841d3d3dd35b299c40fd8a012ca29057cd
-
SHA512
583bf8fcf267070bc128f186c78750e3e128a62898da91635916d9aeb905572bb3d13a862209d4a82b1f2e7e1dc9a21d4adbf4778f7baafff8a6b0750ed9fdbb
-
SSDEEP
384:QtLoNQ5PEnmSav7HEVXxl2SHSE5OY8oZ2uIX29WWgRucdG23vbK5TPWqyv4kdJmj:rN00ikgpMXLMuWWgRwry1q7j/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11ef21f234ede5bc176cc49db92d9dd6
Files
-
11ef21f234ede5bc176cc49db92d9dd6.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE