Behavioral task
behavioral1
Sample
89c8e2af96b9f59a0aefa8130297160e85fc6c0dd8bb696fe2555433e7a5e1d2.exe
Resource
win7-20240704-en
General
-
Target
89c8e2af96b9f59a0aefa8130297160e85fc6c0dd8bb696fe2555433e7a5e1d2
-
Size
3.8MB
-
MD5
0ce88452e3cada1df548c5041ce5304d
-
SHA1
023e0e82c7e1c7b16c339c4f079e34d48ad4c7a1
-
SHA256
89c8e2af96b9f59a0aefa8130297160e85fc6c0dd8bb696fe2555433e7a5e1d2
-
SHA512
650139b7caeed8fd7b5f94502eb22fbb2419de098347d6181eb10d8a4aecd418f87c4f3b580bb8ecc2167d56186c47978351b138903edcf764492843b5f754ee
-
SSDEEP
98304:BnTQ1u4sWhmKH0j+wFyra4m5Yzy57pG6fTn:BnTh4skmKHU+Za1H57z7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89c8e2af96b9f59a0aefa8130297160e85fc6c0dd8bb696fe2555433e7a5e1d2
Files
-
89c8e2af96b9f59a0aefa8130297160e85fc6c0dd8bb696fe2555433e7a5e1d2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 580KB - Virtual size: 584KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE