Behavioral task
behavioral1
Sample
dfe98e751fc7fa3a7cbe5a0735176b085739b400a35d89502316dd43f565ccb1.exe
Resource
win7-20240221-en
General
-
Target
dfe98e751fc7fa3a7cbe5a0735176b085739b400a35d89502316dd43f565ccb1
-
Size
10.0MB
-
MD5
f92954aceae6ee2d405edf644f334ece
-
SHA1
b6e61e4d11553d5825480ed77f13311abcc16fe6
-
SHA256
dfe98e751fc7fa3a7cbe5a0735176b085739b400a35d89502316dd43f565ccb1
-
SHA512
48510a24e8b0d38038a8ab029ff33554ee57f6e9c8c0818d38d731d14908a2ab469fe832d837f06c8aef2d2c65d6b6c6a39991e4bff7a09b07e62fce693697b4
-
SSDEEP
196608:trEvy8CwkTjvyot/MrLQeO24YlM446ZsoqqFOxOSXbhbnPgd1r:h98CwMlkLQpNYlKYSLRYdp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dfe98e751fc7fa3a7cbe5a0735176b085739b400a35d89502316dd43f565ccb1
Files
-
dfe98e751fc7fa3a7cbe5a0735176b085739b400a35d89502316dd43f565ccb1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 574KB - Virtual size: 576KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE