Behavioral task
behavioral1
Sample
356e18bd648645391d5e655e20c10efc.exe
Resource
win7-20231215-en
General
-
Target
356e18bd648645391d5e655e20c10efc
-
Size
402KB
-
MD5
356e18bd648645391d5e655e20c10efc
-
SHA1
890ad0e1be42f036df9bbf10f204eb741e49fc45
-
SHA256
58abc636331fc4c4065ba082b0b89d67f69ada6e6d54626b594001d7104e92bc
-
SHA512
caacea5977b5443e12e6592abe65375eb54de971bb84779147e3337e685c266f0dc5a18c3bb2df9fd3305768238c141f49d021b0d3bf9a50bee0f49b1663139d
-
SSDEEP
6144:tmaKVBGmE84IMNv55giU0pKiFYHxfx15RvOagakZBxkTN2gmeGcFnVQb/DAYbDgU:aSmLAuEY71fviagATFmebVQDcYcg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 356e18bd648645391d5e655e20c10efc
Files
-
356e18bd648645391d5e655e20c10efc.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 620KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 370KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.heowr Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE