Behavioral task
behavioral1
Sample
67ee74a1d186a69e07227060f2b0420f.exe
Resource
win7-20231129-en
General
-
Target
67ee74a1d186a69e07227060f2b0420f
-
Size
1.1MB
-
MD5
67ee74a1d186a69e07227060f2b0420f
-
SHA1
0c22c96428147aff70e9d9f3dcaa862d74eb3eeb
-
SHA256
3b19aaea70b9cafae4b1fb4a7d8cb9b3461f70b1041bb4a7ea40eabe1310260e
-
SHA512
256858f29d6b1812c36e9d5b7b76409c5a317f5bdb11f0c19a8a92e6682ebdd23850a157085d72a12d8861f62306b41d1a67219b357add4c270cd575a90245aa
-
SSDEEP
24576:BDybvhieUmzLJuDRNgiQJuxS/fIZrTQqtFU0MML+:CiRIcRPQuIArTfFU0MMK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 67ee74a1d186a69e07227060f2b0420f
Files
-
67ee74a1d186a69e07227060f2b0420f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 596KB - Virtual size: 596KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 524KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE