Behavioral task
behavioral1
Sample
86702973a895c7e3eca711b3899608cd.exe
Resource
win7-20231215-en
General
-
Target
86702973a895c7e3eca711b3899608cd
-
Size
1.5MB
-
MD5
86702973a895c7e3eca711b3899608cd
-
SHA1
5eccd8a4d8b6af4c351c913e296b1a02abd8ee0f
-
SHA256
b70b680fa32497509586edd399b013e248879eba7774aedd7275f4f0c752f0b6
-
SHA512
03a2b33d12dfe0ed88b29332b33143003441d161db907c5b7fe4ed490146a20efc6e0b5f0b8b7c51d0c10b7466591dd530cdb51bdfdc8720aca1b6675f12bcf6
-
SSDEEP
49152:1Hy17VEuXlPEPh2qmoKSFvbVmrRyiVi9fU++yCzS1UcLvK:tQWclP6M7DSn0V7/y2S1Uc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 86702973a895c7e3eca711b3899608cd
Files
-
86702973a895c7e3eca711b3899608cd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE