Behavioral task
behavioral1
Sample
fc053cf93174a337d8310c78778cd066.exe
Resource
win7-20231129-en
General
-
Target
fc053cf93174a337d8310c78778cd066
-
Size
402KB
-
MD5
fc053cf93174a337d8310c78778cd066
-
SHA1
8e35ae70e27e5eee71bfb0744fd9c05d7f6cc0b8
-
SHA256
0e45901ac284cd893e2b4c86bf00251c678a4565d0869bfafbaa369a8d2bd1eb
-
SHA512
75f5b2e587f2cdd8494def7ef99da49695a0a637f997c34e64aefb1008cb3e914f71d3162bf1cca958124239e987403c7807a7f0a185999e8e5258d8a79a9a8a
-
SSDEEP
6144:kmaKVBGmE84IMNv55giU0pKiFYHxfx15RvOagakZBxkTN2gmeGcFnVQb/DAYbDgI:NSmLAuEY71fviagATFmebVQDcYcs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc053cf93174a337d8310c78778cd066
Files
-
fc053cf93174a337d8310c78778cd066.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 620KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 370KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE