Behavioral task
behavioral1
Sample
d416396cbde85e00d48a84611712b5a1.exe
Resource
win7-20240220-en
General
-
Target
d416396cbde85e00d48a84611712b5a1
-
Size
3.5MB
-
MD5
d416396cbde85e00d48a84611712b5a1
-
SHA1
9ec8fcd44f6df8ca577699517920f9a6440e2101
-
SHA256
54c6f6a2af4d3a9e7a001761e56b96a67cf264333f06d90f71eb210c71673218
-
SHA512
6088243b369cb7b019ee1792386bc95ef6f39a4146ffb8420315c890bb9d3f848d64d0eb6b75ac6b793862a7444e95e42b11f46d0e542cd615e9f6cfcb3ccd56
-
SSDEEP
98304:1jVtjUidxgI3vyvKM68QUOoVI2QP2F3mcVIkPoU44deM6w6SJj+:15tgivgGvRdUOP2+c3VIIoU4AF6DL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d416396cbde85e00d48a84611712b5a1
Files
-
d416396cbde85e00d48a84611712b5a1.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 4.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3.5MB - Virtual size: 3.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cwo Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE