Behavioral task
behavioral1
Sample
4344cfe0b3f47d2ebce7c1d5b3293175.exe
Resource
win7-20231129-en
General
-
Target
4344cfe0b3f47d2ebce7c1d5b3293175
-
Size
784KB
-
MD5
4344cfe0b3f47d2ebce7c1d5b3293175
-
SHA1
cad80e10934ae188bc66a4bef06354a35bb0ce10
-
SHA256
a18f81d385b7079dd0375d4143bf788c12716dea643e6095faf12d4c32b059c9
-
SHA512
5e9561be1c0f12b1d1af1bd8c3d1baa5c2358bae48dce4a6b7e5a0ba8e92cd842bb943435dacbe3e33696d980587ce325d95c5f7b11f27df560a36d32762e0fc
-
SSDEEP
12288:ZAPWcWq8YLLIMt+pWPC+eZAL3pRCDpa3mrqlguCAxnjCYyWFPEuS7gX0WZjJ4:iP8YLsMt+pCCTADC1nrqlg4CShXn1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4344cfe0b3f47d2ebce7c1d5b3293175
Files
-
4344cfe0b3f47d2ebce7c1d5b3293175.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE