Behavioral task
behavioral1
Sample
f7fd5e93d75f39c87b64f77eb71d7aa1612127d7f557136a95028ede87c42cf5.exe
Resource
win7-20240215-en
General
-
Target
f7fd5e93d75f39c87b64f77eb71d7aa1612127d7f557136a95028ede87c42cf5
-
Size
580KB
-
MD5
ff27b97390eccfc58206e375fe0362ca
-
SHA1
a2a5896f171cf9d2e43d814654137898561024b9
-
SHA256
f7fd5e93d75f39c87b64f77eb71d7aa1612127d7f557136a95028ede87c42cf5
-
SHA512
ae8940ea002fc33fe6f77b201ac16910b423a67e840f12711721a39f92ec78b71c0b01d6ef3874524d4f5bd2b693af23020ad4d9f412dd9d31eaf8d2384b8162
-
SSDEEP
12288:msujZO5poa/ig7WCJ5OIxUHPFHHd95t5eDgG4TNFUoSANA:Sj4ToaKgMvZ995LBTj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f7fd5e93d75f39c87b64f77eb71d7aa1612127d7f557136a95028ede87c42cf5
Files
-
f7fd5e93d75f39c87b64f77eb71d7aa1612127d7f557136a95028ede87c42cf5.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 916KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 466KB - Virtual size: 468KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 113KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE