Behavioral task
behavioral1
Sample
18ef5e923c7a58575ff265adc763b9b476d39c9f3726c9cfce7374543c061d17.exe
Resource
win7-20231215-en
General
-
Target
18ef5e923c7a58575ff265adc763b9b476d39c9f3726c9cfce7374543c061d17
-
Size
570KB
-
MD5
bd9f30a235029603dda71e63daabaa51
-
SHA1
3816387e56c0368edc67e7b9a3ae3077d51a2d31
-
SHA256
18ef5e923c7a58575ff265adc763b9b476d39c9f3726c9cfce7374543c061d17
-
SHA512
9877af6e17d6d2b5234b34b768766130a88fa6eabdb43f9caeed80b5b2ebd0e2bb0dfde5efcf85a23aa0caffc396fca76ac2f02ebcc435100f92628b5bb84753
-
SSDEEP
12288:x7zerkKbDkVraNncPQFABDCc+LGZ2FzXJ0w7swXI5FS9ppLBZI8hoS:perkJVraHFABDGCkFV4wrpO8
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 18ef5e923c7a58575ff265adc763b9b476d39c9f3726c9cfce7374543c061d17
Files
-
18ef5e923c7a58575ff265adc763b9b476d39c9f3726c9cfce7374543c061d17.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 980KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 564KB - Virtual size: 564KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE