Behavioral task
behavioral1
Sample
206fadfb7fa1a5e4ec49766ba0ef6de36088aa3cb8929a0aabfd536391674283.exe
Resource
win7-20240221-en
General
-
Target
206fadfb7fa1a5e4ec49766ba0ef6de36088aa3cb8929a0aabfd536391674283
-
Size
80KB
-
MD5
ab79ae3d23be64f8b5e1fb56755a36eb
-
SHA1
c3ce43065ebb3d8cb1b38e929d51bf5dc7dc3b08
-
SHA256
206fadfb7fa1a5e4ec49766ba0ef6de36088aa3cb8929a0aabfd536391674283
-
SHA512
859d1c377aef2a1587f5f15e41ca1d44e106bfdc0654437763aeb57d7a659aa35aeab332b10eb733cabb3d7ad05a984c642b70a63bed4df4a98c2a25e762d77e
-
SSDEEP
1536:zvQBeOGtrYS3srx93UBWfwC6Ggnouy8iT4+C2HVM1p6TVqMJ8G:zhOmTsF93UYfwC6GIoutiTU2HVS6cMJ5
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 206fadfb7fa1a5e4ec49766ba0ef6de36088aa3cb8929a0aabfd536391674283
Files
-
206fadfb7fa1a5e4ec49766ba0ef6de36088aa3cb8929a0aabfd536391674283.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE