Behavioral task
behavioral1
Sample
f93cf765afdc83db66c7fa6e65a4c635.exe
Resource
win7-20231215-en
General
-
Target
f93cf765afdc83db66c7fa6e65a4c635
-
Size
1.4MB
-
MD5
f93cf765afdc83db66c7fa6e65a4c635
-
SHA1
5d30c58a230681dee3951db123d153002e8465dc
-
SHA256
11fa1333306fce3fa0d07f67f7889a07c9ff46c2bea22d5fe6ccfb1a1e09fad7
-
SHA512
4950c42ec633d042e7af0fd1f918743eb80d35cc2832d7e098ad6606dfc951267880a484e5edfa75e59f7c8a4115e5b034c9fbac4fc1675ce82df500f7bc22a7
-
SSDEEP
24576:z6yJMY9UFoRDhkeYM1jJR97zUbia9JVe0hs5WfBiERJchVML1bT6Ep:+Y9UORVOM1jJHzaiape0hsABFRJch6Ld
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f93cf765afdc83db66c7fa6e65a4c635
Files
-
f93cf765afdc83db66c7fa6e65a4c635.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE