Behavioral task
behavioral1
Sample
520030a8a0138f5123815736b8a0590b.exe
Resource
win7-20231215-en
General
-
Target
520030a8a0138f5123815736b8a0590b
-
Size
784KB
-
MD5
520030a8a0138f5123815736b8a0590b
-
SHA1
8cd5fe7f8dd13cab1949d41ce9c8d3f1d18c65ee
-
SHA256
25a378a7951e845ad2512529609c041cc54eea4853fe2a4ddd3e9c99da3533e6
-
SHA512
47ac3f04acd6749a92df8b9fc6aa1889deaaed7f9b7b8ab1b68575d6551f2f292b509b0656c0021389d606da7b1e0b5014331926135144aaedb2d34ecda8aa63
-
SSDEEP
12288:y1BgUUJWYJpvi7wbrPGUKPHXvWk13q4KbRT76nUnezh//ocg9iKkv0mZ:y1BgUmp6783KfXO/bpsUezgEKkc+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 520030a8a0138f5123815736b8a0590b
Files
-
520030a8a0138f5123815736b8a0590b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE