Behavioral task
behavioral1
Sample
469938cab414261b5ddc000cc8eaa0d1.exe
Resource
win7-20231215-en
General
-
Target
469938cab414261b5ddc000cc8eaa0d1
-
Size
784KB
-
MD5
469938cab414261b5ddc000cc8eaa0d1
-
SHA1
55d1cd9a0ff67af642b4527a608daedcce116139
-
SHA256
51a88daa5036f020b456a752a1e9e3a6309c2f96feaee227428edea01430cc71
-
SHA512
c0936fec6609191ae1a6de36310e38d0d6c9016b7343c01e6dfc1c01c732a857a99fb1f903ccc9fd70d8444c1ed80f703065e567fc10049c1105f8e5c25ca2c0
-
SSDEEP
12288:xgL7L8Uox9AOp+iwlEHGCPh/Zbp4W1D2A8v7ssyPRS4+rC5kCTqWCU:xRUk6ObwlAhRaW7vlPRS4L5HTqJU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 469938cab414261b5ddc000cc8eaa0d1
Files
-
469938cab414261b5ddc000cc8eaa0d1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE