Behavioral task
behavioral1
Sample
0022aa9be0b85dfdf3729e977fffbb51.exe
Resource
win7-20231215-en
General
-
Target
0022aa9be0b85dfdf3729e977fffbb51.exe
-
Size
784KB
-
MD5
0022aa9be0b85dfdf3729e977fffbb51
-
SHA1
f0cfc698decf503c06988189f39f3e55afa31a8c
-
SHA256
9b627042c80e27a11d50e58b936291b5c62d1c3b7a8b6306604511bd74ecd441
-
SHA512
92374d8bf694473d70bb46b6e744e909cc182bf5493f14a6d5663e3dfa4f985d33b49fb7a82ad1bc09683b70f4d51bce0a237ae554ea82fc0524f34b14a14eb2
-
SSDEEP
24576:UV5sop000fpvCae3UA7X5DQxIU3NAHdAmp:U/Xp0pfpvCNE6X6f3mHp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0022aa9be0b85dfdf3729e977fffbb51.exe
Files
-
0022aa9be0b85dfdf3729e977fffbb51.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE