Behavioral task
behavioral1
Sample
f2de87b7ea2638b3b22bbae26172f92a.exe
Resource
win7-20231129-en
General
-
Target
f2de87b7ea2638b3b22bbae26172f92a.exe
-
Size
212KB
-
MD5
f2de87b7ea2638b3b22bbae26172f92a
-
SHA1
f83e93ec5261b8288dc5583399b08590ea9cc672
-
SHA256
f1e1c38150a42b919378659723c1d0a8bd0330e77aac4628f6ad4f68c805e41c
-
SHA512
ea8792f6228f1a7088fc40ae7a9d3ac2faea9749e06f7f2b759c0d3ec988ffdd2b63e19ea2986e9ab5f14b6a1edc9136f458572be8c2db9b9e3f5de64483b4f9
-
SSDEEP
3072:OJacj8v7wQ+ZGx7w8wjjP8I1IU8RjrzzvUWAOZjfKdLnYP:OJPgv7wJZ87wBjYI1IUwrIOZyYP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f2de87b7ea2638b3b22bbae26172f92a.exe
Files
-
f2de87b7ea2638b3b22bbae26172f92a.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 416KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 184KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE