Behavioral task
behavioral1
Sample
26195555283afee01d0cf56c6508a501.exe
Resource
win7-20231215-en
General
-
Target
26195555283afee01d0cf56c6508a501
-
Size
3.0MB
-
MD5
26195555283afee01d0cf56c6508a501
-
SHA1
a9ad624f1b7e67cbcf7e543b6e8fc72c6113bc6a
-
SHA256
5c8267372822e91ca74c3bdc723daf893f3484a0af93b4c75c13f889846417ea
-
SHA512
107db7785b6f888ba33c9b1f09ade24a7a82523080475af4775fcbb60587145c1672cdbf75cdfab7125c851c29b5d9ad81d5a8a3b1a6a7570b421962eb22f600
-
SSDEEP
49152:O8zCMDSgb6ocs8eRyGX/I/WB8ZFzmIdxXre7UTW63UaRbgNoAKWZzcVOQsja5j/3:92MDSg6Fs82yGX9mXzmIdhr4q3UaRM1i
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26195555283afee01d0cf56c6508a501
Files
-
26195555283afee01d0cf56c6508a501.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 170KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE