Behavioral task
behavioral1
Sample
261c771460a5a67fb3e0e2e84013cca3.exe
Resource
win7-20231129-en
General
-
Target
261c771460a5a67fb3e0e2e84013cca3
-
Size
784KB
-
MD5
261c771460a5a67fb3e0e2e84013cca3
-
SHA1
d31f8b36cad825d60c0ab091ac37b36a30b4a0ef
-
SHA256
7a1308f98e005cf43fc9df49194cede52e06be53113a1239b1f30ed5a4b79326
-
SHA512
e7208244fa6e58b08bfe2a61c5d70fb06950bcb4cb36b502d364a82d1fb877f7d12749bf0343c38d971aba2a920f0290eb2c10293d1a1f7d347018c92c5a47b7
-
SSDEEP
24576:pCdRDgG/M8UGuwcJT98a4nPlODDDGHSMWf:KNvMwcJpuPMqNW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 261c771460a5a67fb3e0e2e84013cca3
Files
-
261c771460a5a67fb3e0e2e84013cca3.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE