Behavioral task
behavioral1
Sample
176b7a50bbcbc34acedb46561a04c3d0.exe
Resource
win7-20240508-en
General
-
Target
176b7a50bbcbc34acedb46561a04c3d0.bin
-
Size
459KB
-
MD5
176b7a50bbcbc34acedb46561a04c3d0
-
SHA1
38a29d7b1345d3221a550b5b5909436a451a53ca
-
SHA256
c5bcfd00d0b8fda7c4b20cdc9649713d9f01dd12f61ce8ee9c45ec424a6bbdf2
-
SHA512
e8aca08813aac09e496d736156c065fa1cbef22724ce656774dcb9c1f90211a45d2ee382bfdff438403d11954442c240f75e0467866d16508ebbc094b0bb202e
-
SSDEEP
12288:cn/jJUvM1I8L3EdCzRfwnhm8UNAJRv1XtsCgMz4zP4:cJ1hgdCFShtJbXtKzQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 176b7a50bbcbc34acedb46561a04c3d0.bin
Files
-
176b7a50bbcbc34acedb46561a04c3d0.bin.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 740KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 433KB - Virtual size: 436KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE