Behavioral task
behavioral1
Sample
4221b347d19ec4ab0b166fb8dacb4712.exe
Resource
win7-20231129-en
General
-
Target
4221b347d19ec4ab0b166fb8dacb4712
-
Size
465KB
-
MD5
4221b347d19ec4ab0b166fb8dacb4712
-
SHA1
5b9980be0583523f917abc5962aa014a0a96640e
-
SHA256
ced3bacdff548d799a2a903029ac767bb740c558efaa82fc963a00dffe156d04
-
SHA512
14b9a5ea7e820a089aa9a40f3e4ded283bc57aa9f213defb07e3b15ab7558552d0799cd98e1c0df8e1ea1569c9820f0c8599c6ddc85b82fa4b17b2e410766df9
-
SSDEEP
12288:W96m2QgxM2yB8Us+4+87JxfD/z25l+lB2U28:M69By2uvs+4Hfu5l6A8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4221b347d19ec4ab0b166fb8dacb4712
Files
-
4221b347d19ec4ab0b166fb8dacb4712.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 280KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE