Behavioral task
behavioral1
Sample
c853e1396f96dfe4c032666734e6dc56.exe
Resource
win7-20231129-en
General
-
Target
c853e1396f96dfe4c032666734e6dc56
-
Size
402KB
-
MD5
c853e1396f96dfe4c032666734e6dc56
-
SHA1
3726f5a69558acd0f0ba75107b553d241502ffce
-
SHA256
7a903afa3b0e0c3324e9844837254cf5524c0fc4fa5b3bd6b08d37dc207f9232
-
SHA512
858ea624d3086bb2e74cd5234574e62d6cd459a22ee9bf2ac299b4412573feb8a44d331f90db5de723308eea89a586a28320bb11ab852d5a24023e9020154d3d
-
SSDEEP
6144:jmaKVBGmE84IMNv55giU0pKiFYHxfx15RvOagakZBxkTN2gmeGcFnVQb/DAYbDgU:YSmLAuEY71fviagATFmebVQDcYcg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c853e1396f96dfe4c032666734e6dc56
Files
-
c853e1396f96dfe4c032666734e6dc56.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 620KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 370KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.heowr Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE