Behavioral task
behavioral1
Sample
14b1d886e89100d5fb650bb74c3d82bb.exe
Resource
win7-20231215-en
General
-
Target
14b1d886e89100d5fb650bb74c3d82bb
-
Size
784KB
-
MD5
14b1d886e89100d5fb650bb74c3d82bb
-
SHA1
4fb2fc59c5669bb286e4b29f4dea0ded6b87e685
-
SHA256
ddc00f6286d8849f1c5a6217fedac4dfe65780f697c1d2e8aed71bbba3a97c30
-
SHA512
bb4e78a95493e276c302ea630e8128133c16359892d1c34e2de433eb8bb21c07defdcc6aeece88955eaa56ac183c1e805575a2930da3440ca20d384758b8f98f
-
SSDEEP
24576:66xwRkZ0s4gkQuKmynkjoiav7O3y1Ogca6BmKstdhMO:LxPGvgvuLjxUOMZca6cLDl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14b1d886e89100d5fb650bb74c3d82bb
Files
-
14b1d886e89100d5fb650bb74c3d82bb.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE