Behavioral task
behavioral1
Sample
562d1c41d4e8dc9e946620d1ad41046f.exe
Resource
win7-20231129-en
General
-
Target
562d1c41d4e8dc9e946620d1ad41046f
-
Size
784KB
-
MD5
562d1c41d4e8dc9e946620d1ad41046f
-
SHA1
1e5202e2ccfb89d5eca14f304f7a7bf1cc9d4746
-
SHA256
e3e42cc28ad932c90a998229a2db3215bf073407c39d8da8a543dbb6525dd3a2
-
SHA512
2c3a3ae1e89670f8b8883267363f1e53333ca05378ac7c252d66a7d2b7e24c734d0af034d5068f5db4ea51649e4765d4e12f83fa6c2b33cd89381a0c3951e8d5
-
SSDEEP
24576:bqaGzsRvlGrtyPwFhwkwmxPmy7GgkWHw5XM:bM/rqwFhwkwmxPmU7kWO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 562d1c41d4e8dc9e946620d1ad41046f
Files
-
562d1c41d4e8dc9e946620d1ad41046f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE