Behavioral task
behavioral1
Sample
532e948b4294ae573fa9d718edfbe347.exe
Resource
win7-20231215-en
General
-
Target
532e948b4294ae573fa9d718edfbe347
-
Size
1.5MB
-
MD5
532e948b4294ae573fa9d718edfbe347
-
SHA1
190066050a31b662213afe5aa5960010322d291f
-
SHA256
be065e0610013ab3e698bfc8bc6038291342c445cc0f0cccfa4dd17c3034ad45
-
SHA512
f648271361ff31baafb80c1ca712bdb11c6c536a40cacfa7b829f55bf48b3e54984a5d98088aabebb763a1bc2bbb1614e60c024f48faa7722e5303c1a972c5ee
-
SSDEEP
49152:MNmKrWAhgMD2FovJrZoVK0r+J2W7pDtZe8f:M0UlhgMD2Fov282mxtZem
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 532e948b4294ae573fa9d718edfbe347
Files
-
532e948b4294ae573fa9d718edfbe347.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE