Behavioral task
behavioral1
Sample
434119bcf36903f160aa3e0099aa9374576f3280190bb4c3e6b9e824446f4cd7.exe
Resource
win7-20240704-en
General
-
Target
434119bcf36903f160aa3e0099aa9374576f3280190bb4c3e6b9e824446f4cd7
-
Size
82KB
-
MD5
d272f969b47773ba645c703210f4f6a0
-
SHA1
15f02f2147d65ad211c714b8f9d6d0e8f002e410
-
SHA256
434119bcf36903f160aa3e0099aa9374576f3280190bb4c3e6b9e824446f4cd7
-
SHA512
fc6f43c35aec0df682fe8f01d499d36357167908afb21e7090f6f804af9663c814620301593f8dff04907234f91d7ee07c6093974782e67c37f8e8005a62d09e
-
SSDEEP
1536:JmBpNDAoG2kf4F+KfQwHq0NVFXqKseZ656KqBxhKYvonouy8GVUVhzv:8hDAb2VHR5aKsDIbTomAoutGVUVxv
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 434119bcf36903f160aa3e0099aa9374576f3280190bb4c3e6b9e824446f4cd7
Files
-
434119bcf36903f160aa3e0099aa9374576f3280190bb4c3e6b9e824446f4cd7.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 140KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE