Behavioral task
behavioral1
Sample
TEST.exe
Resource
win7-20240220-en
General
-
Target
TEST.exe
-
Size
923KB
-
MD5
07187fd72e58a58000f1a7f003c5cf98
-
SHA1
be16a56e034cea9a44e85b268580c7b1c794bafa
-
SHA256
0199c9e187872b7cc492ae3b8bbe6e47c68762c01d6120e78b627cd7dfc4fbe8
-
SHA512
b07bb3f279a50d344cba9e33f9675384152dea45e75370534fb5392609ea35c00441ec544857cc9388ab80465e865d5e48db55c18df6b81266cc8534e0795b52
-
SSDEEP
24576:NYKN2cQZq4ZynzE8YxJRx3Fsl5zhO5HZH7V:NYlZ5EzFYxJ2EHZZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource TEST.exe
Files
-
TEST.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 906KB - Virtual size: 908KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE