Behavioral task
behavioral1
Sample
65e52ad991c29321e4e1fa87e154d8e0.exe
Resource
win7-20231215-en
General
-
Target
65e52ad991c29321e4e1fa87e154d8e0
-
Size
784KB
-
MD5
65e52ad991c29321e4e1fa87e154d8e0
-
SHA1
48114fb80b751e8df656513f35d9167b277bcf53
-
SHA256
75ef9a14c358892b22c8a1aca55caf28ed13656296d36efa8e5b6809680b8d70
-
SHA512
614a6b033cb4197e597336b169a5a757968e4e5d27984467e1147c68a09b105f93b554935f811b30b463bf781f38cdd512f492fbd5fb233b59f01bd2ab264aa2
-
SSDEEP
24576:hdf8M1JBOLyFsI+mzV8cYBiHQuWoRPVgUpjzC:hdEvy3Pze5iwuPpC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65e52ad991c29321e4e1fa87e154d8e0
Files
-
65e52ad991c29321e4e1fa87e154d8e0.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE