Behavioral task
behavioral1
Sample
b1041d76466ba59f9c180b44594362735de4a93c3cbc72fb053fae1db1cc1410.exe
Resource
win7-20231215-en
General
-
Target
b1041d76466ba59f9c180b44594362735de4a93c3cbc72fb053fae1db1cc1410.exe
-
Size
60KB
-
MD5
b8d234fdeaea24be7a20b19a2f8c133e
-
SHA1
78c0da0d476cf855c4eeb9f08d3048f3342dc4e2
-
SHA256
b1041d76466ba59f9c180b44594362735de4a93c3cbc72fb053fae1db1cc1410
-
SHA512
f54648981fe26435c8683b09863e8cb3d30044dbc20ff8d8dddcf4cd06a43ddfd99f816ed4e06f35d9de6dcbf5575054c611acaadce32ac0752b1b689fd2732e
-
SSDEEP
1536:K4dJooh0Wa0aer344Jw/ytUqVS5EkIijQ1fTNPUtU7xu:K4dzVTaer344JzthRZijQ1JPU
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1041d76466ba59f9c180b44594362735de4a93c3cbc72fb053fae1db1cc1410.exe
Files
-
b1041d76466ba59f9c180b44594362735de4a93c3cbc72fb053fae1db1cc1410.exe.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 58KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE