Behavioral task
behavioral1
Sample
sound-of-sorting-0.6.5.exe
Resource
win10-20240404-en
General
-
Target
sound-of-sorting-0.6.5.exe
-
Size
1.6MB
-
MD5
8632a71fcc471f4b3ed6934e050ae3b8
-
SHA1
4047dc9afb660b6d80690d6bc01da983d78c1dba
-
SHA256
639abca2a92c1558bf0d8205345a4db5f426c34b828da694115999308d3b2e4f
-
SHA512
affb1b7f0a83e62c072859076ef70b7cccacc3024c88d27c207f45345a0e2c182afe8d038285dc29bbfe04d3bfb88d5a867dee5217bedfa1f2c9df0739c0ebce
-
SSDEEP
49152:OBajD4vRGYP6SXj1acKFeCSeq/7xiVO4g:moMHSi1MejeqzxGg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource sound-of-sorting-0.6.5.exe
Files
-
sound-of-sorting-0.6.5.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 4.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE