Behavioral task
behavioral1
Sample
701496c44b55cb7f5f625241932288aa.exe
Resource
win7-20231215-en
General
-
Target
701496c44b55cb7f5f625241932288aa
-
Size
402KB
-
MD5
701496c44b55cb7f5f625241932288aa
-
SHA1
1ae46a84d588fe13c6fc1f37c6f00acd3c473e0f
-
SHA256
63764bcb79ff74e2b401c28a842367a9544d2470e618b6686131f035683f3550
-
SHA512
d964d87a2881eb20b8f21124fe46c6bb4d13de45fda1b4e215a473f49d295b1c7c2ed0afa6b325df7482cfed28bc630354e9a046426e1cda7c10c85fd5aa78a6
-
SSDEEP
6144:lmaKVBGmE84IMNv55giU0pKiFYHxfx15RvOagakZBxkTN2gmeGcFnVQb/DAYbDgW:iSmLAuEY71fviagATFmebVQDcYc6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 701496c44b55cb7f5f625241932288aa
Files
-
701496c44b55cb7f5f625241932288aa.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 620KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 370KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.malv Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE