Behavioral task
behavioral1
Sample
551b9c8a3540cebb4137c8039070c225.exe
Resource
win7-20231129-en
General
-
Target
551b9c8a3540cebb4137c8039070c225
-
Size
784KB
-
MD5
551b9c8a3540cebb4137c8039070c225
-
SHA1
932ea6706eef5f50624869c80d6f49703f9bdf06
-
SHA256
e3e362e8103ae5d4a2f502d0d0bc6c1e35d50becbe7ff313c76fd9df426d9999
-
SHA512
cc50d4e0b2d8acb01e2f92ee284e83774bf9fc921e714297c24528a7e4f1df083071d232ca97272bae37454829f7be46fbd5c48d101c930b25ed49e62eb857b4
-
SSDEEP
24576:hPqBJMy6p62Ya6QDNU7zf87aS+e+v0kCJ:0Bvq6O27zf8+S+bvc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 551b9c8a3540cebb4137c8039070c225
Files
-
551b9c8a3540cebb4137c8039070c225.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE