Behavioral task
behavioral1
Sample
a98cb7622800b4e9c04bdc4ccd0299a400a91c9311df5a5aa1c564ec4b1ebca8.exe
Resource
win7-20240708-en
General
-
Target
a98cb7622800b4e9c04bdc4ccd0299a400a91c9311df5a5aa1c564ec4b1ebca8
-
Size
83KB
-
MD5
07f40445ee0a1e17c3ff6fda1da8632c
-
SHA1
8430cba56eb13f97105b895c6b9b4ca834dc8792
-
SHA256
a98cb7622800b4e9c04bdc4ccd0299a400a91c9311df5a5aa1c564ec4b1ebca8
-
SHA512
f8d2ceac56198a3da3076f05ce3239e4ef421d4a4f3cea24bf61d6c738bda4b1fdc66226b399d89136ac49b4508cce2bc9868dbc63ec786fb68bc3dc0e56d6e4
-
SSDEEP
1536:V7Zf/FAxTWoJJZENTBBA1AZicHoHZacVE5Iv4dCUgo:fny1tE5A1qXHLbQ4dCUgo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a98cb7622800b4e9c04bdc4ccd0299a400a91c9311df5a5aa1c564ec4b1ebca8
Files
-
a98cb7622800b4e9c04bdc4ccd0299a400a91c9311df5a5aa1c564ec4b1ebca8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE