Behavioral task
behavioral1
Sample
TS-240316-UF7.exe
Resource
win7-20240220-en
General
-
Target
TS-240316-UF7.exe
-
Size
1.0MB
-
MD5
66befde665c35e2c14da8fb81909777c
-
SHA1
a21580de96254a66647eacd735a827e076766741
-
SHA256
b5ce73dc83dfb4c803bd66670f48d8a663750fc0a9a7c6e327a4b2e143b53b33
-
SHA512
8102aa07d86639b46d333873b07371d6a1f0a3b6d527c862c8fd37ce12e817426fcb7f148093b93a10dc13d7fa6e7f731b780c039a75653448568079f8b1c8a4
-
SSDEEP
24576:OQtwG8CgwFT1IuViCQ23EF1tRyM3b0zq1wvd:OADtxBTP3EF1tRZZwvd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource TS-240316-UF7.exe
Files
-
TS-240316-UF7.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 600KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 243KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 143KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE