Behavioral task
behavioral1
Sample
152316928be9b202427df7af3022503b.exe
Resource
win7-20231215-en
General
-
Target
152316928be9b202427df7af3022503b
-
Size
211KB
-
MD5
152316928be9b202427df7af3022503b
-
SHA1
7a25f78e1306d8e8a9d3873406783d2c0056dc15
-
SHA256
92d800402a655bd2a7782ebf223c9aff451fa70ecbc2509ec56100edab278f1c
-
SHA512
94b532b009b76b546f27af40080719046368be2a875f2570278b0bfe3a5ddb220bed39bc0cb75b895cda3422d5d666b75ca60e68f1847840ea7cc47fea0a3e35
-
SSDEEP
6144:n8UPSZdSNfZKJ7q4aMzU+35yqlNRV7mlA:TPSTyZc7q4aMfJ/D
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 152316928be9b202427df7af3022503b
Files
-
152316928be9b202427df7af3022503b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 364KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 201KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE