Behavioral task
behavioral1
Sample
abf58e0bb6265d9cd137258b7c52bc68.exe
Resource
win7-20240221-en
General
-
Target
abf58e0bb6265d9cd137258b7c52bc68
-
Size
359KB
-
MD5
abf58e0bb6265d9cd137258b7c52bc68
-
SHA1
ab92c3dab21000ecf9d57ba114b68c21076063c8
-
SHA256
a6c99b72c1a4fcee853776ca4d3d64ca13e17c493c52b3c9ca12f0cf779d5bfd
-
SHA512
94b4de40b731b615be19f8e366e079844c9edef1f5a630a004cd7fd275572ea58676db6bee9f260411df95c55146a1f4cdc38d537513cba0ccce03cb367de16b
-
SSDEEP
6144:1pbIE+xJ+n88x1B0UDut+s9iFBESpiiFAeoSSh2smjtIvEqfT:1oWx1B/8JcUiKeoSSWehf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource abf58e0bb6265d9cd137258b7c52bc68
Files
-
abf58e0bb6265d9cd137258b7c52bc68.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 344KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 188KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 170KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE