Behavioral task
behavioral1
Sample
db73833937c45296d4893505b43deb93986422b052d5f25080296cc2cf889424.exe
Resource
win7-20240221-en
General
-
Target
db73833937c45296d4893505b43deb93986422b052d5f25080296cc2cf889424
-
Size
112KB
-
MD5
319444e7bd7a20caef38dfcf22948f3c
-
SHA1
b36911d184d3dbe4cf123ea129c550508ce7741d
-
SHA256
db73833937c45296d4893505b43deb93986422b052d5f25080296cc2cf889424
-
SHA512
1ff46554ae94b4e134665667010a6b68e8f89ccd9ac4f672a2c31b596434b06cdbe164da6a08acb1954f4d968d39ec2d6dcd777cd0514071c802c458ab1fbe21
-
SSDEEP
3072:6bvuDlK3L7wHfxy8SOk41y2KC9V6rboG0/RhJAPout4:cGDswHfxL4C97ZhJKoS4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db73833937c45296d4893505b43deb93986422b052d5f25080296cc2cf889424
Files
-
db73833937c45296d4893505b43deb93986422b052d5f25080296cc2cf889424.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 106KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE