Behavioral task
behavioral1
Sample
28eb29aabfe6c68511909945bd976616.exe
Resource
win7-20231215-en
General
-
Target
28eb29aabfe6c68511909945bd976616
-
Size
598KB
-
MD5
28eb29aabfe6c68511909945bd976616
-
SHA1
9c5d926e524ede76bb2dd6036b303200913f951d
-
SHA256
8a26342451ab7905a025df6591bb15c0cae7fbb80267370df236e40286ee6d93
-
SHA512
d1c9ba8e2300db7c5b6c75d769360bab8e8e87cfe71f17e31c574a71b36c8f2b00385b3e1f2bfc1263c0293db2f09e4f8594759a0bc7ff934b5bf5b1cbf26a7e
-
SSDEEP
12288:rJz0TrCqVM8UoAs4fg4xbFs9lLaAgev1pS4aCkFdqri9VWQMkbx/yMFqNfuw:FirCkUo8fLBqmze9pS4a7qu9VdMkbIM8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28eb29aabfe6c68511909945bd976616
Files
-
28eb29aabfe6c68511909945bd976616.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 816KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 568KB - Virtual size: 568KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE