Behavioral task
behavioral1
Sample
74fc5256fb886541d15289f527c52759.exe
Resource
win7-20231129-en
General
-
Target
74fc5256fb886541d15289f527c52759
-
Size
1.3MB
-
MD5
74fc5256fb886541d15289f527c52759
-
SHA1
1bf19d061517f06188cedc2fba978627e364d58e
-
SHA256
c1d58070dca6b97c892a6cbacdc275ec76c7cac55ae6f32874d58c2fb6a5aa9b
-
SHA512
f440dbf3a6b5c2ab011837a9149bba1d44e894ff3059e797c048d33d109aee1c3ad17402653a927f358bca14eeb21c571ba37001d22533ecabea34d567be6565
-
SSDEEP
24576:iHjBPzrTNeCaplRkWwPSawTBv4tDjez5w0VWJvG:yrpUDRZwPStTBv8Djcw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 74fc5256fb886541d15289f527c52759
Files
-
74fc5256fb886541d15289f527c52759.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE