Behavioral task
behavioral1
Sample
26d540faacacd3ef708d1adb1bec69c0246700e5a9d29829bfe4d5c373a85f94.exe
Behavioral task
behavioral2
Sample
26d540faacacd3ef708d1adb1bec69c0246700e5a9d29829bfe4d5c373a85f94.exe
General
-
Target
26d540faacacd3ef708d1adb1bec69c0246700e5a9d29829bfe4d5c373a85f94
-
Size
792KB
-
MD5
5ee2f5a656e615ed1cd68473e74a493c
-
SHA1
3ad44e2367359c2b1ff46e3daafb80f3cdd42964
-
SHA256
26d540faacacd3ef708d1adb1bec69c0246700e5a9d29829bfe4d5c373a85f94
-
SHA512
446679a5704ec198d519ed80a7eef22eb1951fe4ef649a6e5998c65c78f8f645ef720d8759e4ce8c31bf683d4987217ef4885e092e1b16b0c6ba5c69573803d0
-
SSDEEP
24576:VEykp/dvVkFirCOg3LGzK9Gx5s/0DsqRm/TI:S1do8Kh8Dm/TI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26d540faacacd3ef708d1adb1bec69c0246700e5a9d29829bfe4d5c373a85f94
Files
-
26d540faacacd3ef708d1adb1bec69c0246700e5a9d29829bfe4d5c373a85f94.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 100KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 690KB - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE