Behavioral task
behavioral1
Sample
07248a0cf0e172ba10ca8693bc5bf8df8e8961d9b99f46e183dc80ecf81fab52.exe
Resource
win7-20240215-en
General
-
Target
07248a0cf0e172ba10ca8693bc5bf8df8e8961d9b99f46e183dc80ecf81fab52
-
Size
1.3MB
-
MD5
3d0eee80d14ffe2736e4846d2adb411d
-
SHA1
2bfba85cc0f0610a009deac548aa248595892ce7
-
SHA256
07248a0cf0e172ba10ca8693bc5bf8df8e8961d9b99f46e183dc80ecf81fab52
-
SHA512
f3c210ff55dfdc09220e4c096ac267f6f03a749e304cb090d4d963e53ec66ab275554ad9d57f7ab32c8a1fd954ee36f3a985c75f49121b56aab3299be50f4e3e
-
SSDEEP
24576:dwY88XO5CjahRp5ygg0nOo49txlOr/vyrryQ20phJVnmzpnnmK8Uv:dIOiRhRrb4JlOsr32AhJFmzVmQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07248a0cf0e172ba10ca8693bc5bf8df8e8961d9b99f46e183dc80ecf81fab52
Files
-
07248a0cf0e172ba10ca8693bc5bf8df8e8961d9b99f46e183dc80ecf81fab52.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 776KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 168KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
EKx�u� Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE