Behavioral task
behavioral1
Sample
efa3e6f2aa51461869885937b7971f5ca513619fc2b78a7cbaad49223e790567.exe
Resource
win7-20240221-en
General
-
Target
efa3e6f2aa51461869885937b7971f5ca513619fc2b78a7cbaad49223e790567
-
Size
76KB
-
MD5
006ddf0db1b1976dc1769a3a557e7cde
-
SHA1
c14f04045a084c4dec242d93ecc55fb9932e65f2
-
SHA256
efa3e6f2aa51461869885937b7971f5ca513619fc2b78a7cbaad49223e790567
-
SHA512
d5b3f184e8a8a54d3ecc67dab2ded9a486de8c2e8ba014d1757b5d2cd57e8ad1fe013bf6605c9595abb6a716690e5670552b422b3731693b2707c558385ddc1a
-
SSDEEP
1536:2kOWhbK2q7dRs5j73T37iqoYzbHdaLh0arTieuYElSUxGCq2iW7z:dOIK2qL6j733s0arTxuYfkGCH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource efa3e6f2aa51461869885937b7971f5ca513619fc2b78a7cbaad49223e790567
Files
-
efa3e6f2aa51461869885937b7971f5ca513619fc2b78a7cbaad49223e790567.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 124KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�U���uK Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE