Behavioral task
behavioral1
Sample
1174a1b6ed51208722a40db8435d92a14637c00d6b4d99fa1af8682fe4f2e1c4.exe
Resource
win7-20240704-en
General
-
Target
1174a1b6ed51208722a40db8435d92a14637c00d6b4d99fa1af8682fe4f2e1c4
-
Size
307KB
-
MD5
8b9b96d0a73b05ad98d16f76b782c9e2
-
SHA1
9b93764b100d75330c2324a212100b5da31691ed
-
SHA256
1174a1b6ed51208722a40db8435d92a14637c00d6b4d99fa1af8682fe4f2e1c4
-
SHA512
f12733cbbfe0270cef295e0296ab68e7e7c9393fb3779a5562828112ea9197738e03fa23b641172b3e1cd3e7318139e4fd45ee01020578e3843aaf2724c22904
-
SSDEEP
6144:xcm4FmowdHoSPubPtyePp3+4S+3Y6kHhJ0hwdHoSZpCJPjtYJl0pJcU33z0Z9kv2:74wFHoSPubQ0BMccXlHoSZpC9JThD0ZN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1174a1b6ed51208722a40db8435d92a14637c00d6b4d99fa1af8682fe4f2e1c4
Files
-
1174a1b6ed51208722a40db8435d92a14637c00d6b4d99fa1af8682fe4f2e1c4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE