Behavioral task
behavioral1
Sample
Port.exe
Resource
win7-20240221-en
General
-
Target
Port.exe
-
Size
1.1MB
-
MD5
49edb4ec07b391ea6870fe2ee46f3a12
-
SHA1
949fc2320265bfa9fbc8c14f407b65f9c021fc60
-
SHA256
30753793ce4b36830eb0d39ab6c252c2d1054f0a29270f9719696353bde316c7
-
SHA512
6f975eae7906d55fd8f3ea1abcd8d455058d76c1add9a31b8df3377725aafd0d4bb7726fd2c31a024894d362ed132e98a4e30f569d37c2bb3ed1ff79d7d429c4
-
SSDEEP
24576:ooDl0/A+jmp8m58KkVeeV6DtVUz/wdcEEpROPeFTZkYOIKXu:CAFOeeMUzCkwcZkYOZ+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Port.exe
Files
-
Port.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE