Behavioral task
behavioral1
Sample
install.exe
Resource
win10v2004-20240611-en
General
-
Target
install.exe
-
Size
156.5MB
-
MD5
c2ec3452888e1a2ce017824094cccd6a
-
SHA1
a7354cb36d47039a14a5a1034a7bb7f8a289bc68
-
SHA256
3fd5b9f51c5e9870889975fe0583e670623162d70acf45163d045f1411ff0b2e
-
SHA512
0c7e11e210a7fe44a02c5fdf946ea43d157e994b202b09b0cc33188253f8713146040c383f62dec56a2a8c2ec61fdeb70c330e0671e2ae5a722cd89de6e1ec17
-
SSDEEP
3145728:sI+MV3PXe5l+fhBds45QVCJz0vrhSBgMhoXIkY/m0h0iMKVElVidA8+WewObZrx:phlKWfdskQVY0vfMiyN0YElodA8+v
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource install.exe
Files
-
install.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 172KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE