Behavioral task
behavioral1
Sample
90069576e224da752aed6c0d2085748a.exe
Resource
win7-20231215-en
General
-
Target
90069576e224da752aed6c0d2085748a
-
Size
216KB
-
MD5
90069576e224da752aed6c0d2085748a
-
SHA1
a33cc50b6556d6a62814711dc8f3c030db66c523
-
SHA256
9a8b527e20d782b21d294215a12b5131f0f7f9e4c7c5cb91bc45cf368c9ee45a
-
SHA512
fc6231e807c47edda6076812c7a7d61162bfe303cdd49bf4fd06a01579393a1cb55642209cc18f7c6cd0f9d94d33ecb1a491fd8a45af68be6673095ab028227c
-
SSDEEP
6144:7NCzLYXnXmUhko3w4ge971kk3YEJ9aghoSRe4:7NCzLctvw4geda87JYghoSRe4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 90069576e224da752aed6c0d2085748a
Files
-
90069576e224da752aed6c0d2085748a.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 178KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE