Behavioral task
behavioral1
Sample
d57292a530e07c40406f8630ddbc9813.exe
Resource
win7-20240215-en
General
-
Target
d57292a530e07c40406f8630ddbc9813
-
Size
278KB
-
MD5
d57292a530e07c40406f8630ddbc9813
-
SHA1
c1754514f22374146e7e03eeb65c475db6b1e2ce
-
SHA256
e237002cbbd457eb073f788511ffa467a0fcc7f44db8ab817894a43f7c56ba79
-
SHA512
1e7e692019b5a2cfa2a63d74711bf511fac8b92ed28cb2322e871191eb37bf1533ab53f6096926a9a5244567ba719d77614ee7ed3a275c588142d71bd0902ec4
-
SSDEEP
6144:UTnjnvrDiMNb1LSlZCgb5OQx0MciQGKAabe9RMJGtk4K1iKvc/Tx7mz:UHn3dtYb5O0ci1+kRMb4K3U1O
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d57292a530e07c40406f8630ddbc9813
Files
-
d57292a530e07c40406f8630ddbc9813.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 312KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 187KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.SUPX1 Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE