Behavioral task
behavioral1
Sample
12559c018a7acb110e59eff15ae1c556.exe
Resource
win7-20231129-en
General
-
Target
12559c018a7acb110e59eff15ae1c556
-
Size
2.3MB
-
MD5
12559c018a7acb110e59eff15ae1c556
-
SHA1
0a251bc039f1cd6dfc6af20f854b174ee54a7821
-
SHA256
cd4029a2c4df3108c4fc35597a0ed30b38a8a6d9a9e47748f41471b843792c5f
-
SHA512
297d76819b042993c4102d249304afcb64e4e8b18491aa53b6159e2e3e0e8e0446155e5f28f0e55bcdc7581c0976dc1b2ee3b307b13d82353ee5f890be647d21
-
SSDEEP
49152:yOCb9FwIJDWoFlC3Hq7JJZS04RQZC/vLk+FFQPmRIk29r/mkN:aZFXy0qqJs04RQB0FQPuT2BO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12559c018a7acb110e59eff15ae1c556
Files
-
12559c018a7acb110e59eff15ae1c556.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE