Behavioral task
behavioral1
Sample
14672fc04f929d9d6f88fb2092c101389cd2c8b7963fba7c90fbbbee80a256ba.exe
Resource
win7-20231129-en
General
-
Target
14672fc04f929d9d6f88fb2092c101389cd2c8b7963fba7c90fbbbee80a256ba
-
Size
103KB
-
MD5
04b778c2327bd1e26ca1e8b6f9193482
-
SHA1
2f051e24020d14881300cc3dc68b24fcb1eaaf8d
-
SHA256
14672fc04f929d9d6f88fb2092c101389cd2c8b7963fba7c90fbbbee80a256ba
-
SHA512
6f24a19eb9d3605a6514d18100bddc72d7e8ceb9270c3c0d6add0791f708fab5e1303bc0f6b8eec64ca0ef1b574986ee45665b9f53dcc65f37adb2ddb1d04ae0
-
SSDEEP
3072:xhOmTsF93UYfwC6GIout03Fv9KdYGUSyvDC:xcm4FmowdHoS03F2Y9JDC
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14672fc04f929d9d6f88fb2092c101389cd2c8b7963fba7c90fbbbee80a256ba
Files
-
14672fc04f929d9d6f88fb2092c101389cd2c8b7963fba7c90fbbbee80a256ba.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE