Behavioral task
behavioral1
Sample
14375ac4e7c2ba2f0467da44a6044c4e.exe
Resource
win7-20231129-en
General
-
Target
14375ac4e7c2ba2f0467da44a6044c4e
-
Size
63KB
-
MD5
14375ac4e7c2ba2f0467da44a6044c4e
-
SHA1
38e163c240c8ff7c18bd2118c13f156bf69fb013
-
SHA256
2fed6f0b7bccf8e9348f22b9b2683cb1033a8e0caa3e26208f592d33e2caa2df
-
SHA512
ac804c83cda82436f277cdcc73f03c418f6b8e6d126aa69262eeb2cccb8c97ee7b6a44ffb104c4e8bf8a7353261f494dcd4a067af36ba2a64eb0e42e4c08f249
-
SSDEEP
1536:d8s7jyWJ33mYi1bZSfoNrG1b/q7t93NUEdX:d8iyp1bZSfkSyh93L
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14375ac4e7c2ba2f0467da44a6044c4e
Files
-
14375ac4e7c2ba2f0467da44a6044c4e.exe windows:4 windows x86 arch:x86
7a7803027531302026dedc7b5f6025f2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
Sections
UPX0 Size: - Virtual size: 480KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 60KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE