Behavioral task
behavioral1
Sample
221fa7eee115e0be07e57d9697944f04.exe
Resource
win7-20231215-en
General
-
Target
221fa7eee115e0be07e57d9697944f04
-
Size
1.2MB
-
MD5
221fa7eee115e0be07e57d9697944f04
-
SHA1
3eb118b33acd5023c85ad70992e5528cd24d21fa
-
SHA256
24d4ce21d266dba3e9683b50772761b51dbbbf2b671d1508287509c8193cfc65
-
SHA512
ded63e5fb908716878688ca992dc3a6549de70c40fcc5cca2abc6d302ed560dc9c26c88846c546649d8fdefff03ac91e08196a40c43984660e2a4a66f5d6d07c
-
SSDEEP
24576:hav/F4OqPxtgHlO82wtGKAoKtijtaH5SlHTKCU5bNa1w6ZbOkjW2kySL:havNxqpWR2w7jja5guXJmbHK2z
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 221fa7eee115e0be07e57d9697944f04
Files
-
221fa7eee115e0be07e57d9697944f04.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 89KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE