Behavioral task
behavioral1
Sample
d4af7b3ab7348a00336e13c114e147ff.exe
Resource
win7-20240221-en
General
-
Target
d4af7b3ab7348a00336e13c114e147ff
-
Size
784KB
-
MD5
d4af7b3ab7348a00336e13c114e147ff
-
SHA1
e6e1f15856a34f3ce0ba8ace7637452244a4ed59
-
SHA256
b8a0608e344d42b037d2ddd7237f577fd3e67592a43bd1c243f1a6107c71a319
-
SHA512
53e9964529125909d742ad86f29587360dbeac897fcdb1f1c4752152fa358862d00028873465baf1b6c0d79d389a9b9b8e0755459af42e70a0a4f3ae3eb8dd3a
-
SSDEEP
24576:9EK79c3HnFpaIpkUqF18RlzzTDritdU1:R5cXnFpas41A1zjN1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d4af7b3ab7348a00336e13c114e147ff
Files
-
d4af7b3ab7348a00336e13c114e147ff.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE