Behavioral task
behavioral1
Sample
219fd5faa875245cdbee7cca984e4c8e.exe
Resource
win7-20231215-en
General
-
Target
219fd5faa875245cdbee7cca984e4c8e
-
Size
2.3MB
-
MD5
219fd5faa875245cdbee7cca984e4c8e
-
SHA1
7def462b92a81647fb35ae1217c67356550d8845
-
SHA256
e1cf3ebaf3b6fd93c3e5f3ba3a9b670f4ba474ac6f809a9d71656865abcfa6a9
-
SHA512
76fc912216b79de54a3f2f8ae01b61c1e0ea30fc6348849a211e542f71a8d1a264c1df871f7f434b1f75fb7f7a33d29e7801e28906765fac510adf7ee60d4c46
-
SSDEEP
49152:rF/Qr6///nmA2GGeAY+o19QgzRZUT5wIPQKWGqbRCpmYsBg:R/Qr6//+A2GD+O9Qgz3qaIoxl7y
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 219fd5faa875245cdbee7cca984e4c8e
Files
-
219fd5faa875245cdbee7cca984e4c8e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE