Behavioral task
behavioral1
Sample
373f25e7da45d48019c326e58ae35696.exe
Resource
win7-20240221-en
General
-
Target
373f25e7da45d48019c326e58ae35696
-
Size
385KB
-
MD5
373f25e7da45d48019c326e58ae35696
-
SHA1
79a09dd556aeff172e35f414c0870b666e4dd1f2
-
SHA256
c6dc254df0bce3dc3940aa70853bb5f30efc0a4574ef26eb214997c1391bee27
-
SHA512
073ac403c092da2998afd9d10246219e8038062a06cf9066a4f764c75a14ae48ae0eb179bbeeeb70d86f8ea4f5affb0cda1849eefaa6292b4d959b79c8dad8e8
-
SSDEEP
6144:tfKUuk3Zz7INHrUP0Q9G9G8rMd1CX4/D1qPDmftZvVhlvDGjaELfDMzPS94dm:NBJzsNfIG0IMHCX4b1qLmvvXlrKVfjMm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 373f25e7da45d48019c326e58ae35696
Files
-
373f25e7da45d48019c326e58ae35696.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 196KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 348KB - Virtual size: 348KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE