Behavioral task
behavioral1
Sample
19a6246a1435a30f0008abb10bc68c96.exe
Resource
win7-20231215-en
General
-
Target
19a6246a1435a30f0008abb10bc68c96
-
Size
543KB
-
MD5
19a6246a1435a30f0008abb10bc68c96
-
SHA1
a51538a5690372b38b02f461f4b999cae7dccfdd
-
SHA256
a76ee877788df636d9321a2ecf83ac4947f4f8f2cb29efcde57ae280ee3e2a8b
-
SHA512
3df35a1e78d68f024a0f5d5b28ea21c8d16f48997330e8cd748ecbd29539ac47b2d17d55a2245ef5d3ec5e888a38b4678758e59ddb30f6d79360216be2dadfb3
-
SSDEEP
6144:KxWjVNXjGGlfUCfdvfeOsXoxyKegus+b0GRcq8ns3NFNB38Bq7Zzcjs:KxWRF/lVhW8vt+b0GRWE78BqNqs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19a6246a1435a30f0008abb10bc68c96
Files
-
19a6246a1435a30f0008abb10bc68c96.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 212KB - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 60KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE