Behavioral task
behavioral1
Sample
89f233aef338f22de28d54a13f7a5eb6.exe
Resource
win7-20231215-en
General
-
Target
89f233aef338f22de28d54a13f7a5eb6
-
Size
377KB
-
MD5
89f233aef338f22de28d54a13f7a5eb6
-
SHA1
97b7dc81ac41b2cb8526ef8bfc304a3256320b13
-
SHA256
cfaae67eb481945de8b7a8e60b211b12e2128c549ea6c076676c6cdb9f765068
-
SHA512
6f7eb3f83dbf6fed6b24470d5f41d9eb4ccc9f57c08bbd663e26699b0064a1082a05ffd0d6d19d4b518d7666aece1e11369b5c1159b20056fa88b20cbfa06626
-
SSDEEP
6144:/ClhBxd2eXmimO5vERJSG0/iPQjNa3x3w5qOu5aRXfrGhSi962LqTY0MsnVUc:/CXBKeXmrmvERsT/eQix27XRvremUvYd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89f233aef338f22de28d54a13f7a5eb6
Files
-
89f233aef338f22de28d54a13f7a5eb6.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE