Behavioral task
behavioral1
Sample
de1ea3a7dbf8ee7805bb71b03360a5a8ed4a1246e09a6de27759d97d2f6673e9.exe
Resource
win7-20240704-en
General
-
Target
de1ea3a7dbf8ee7805bb71b03360a5a8ed4a1246e09a6de27759d97d2f6673e9
-
Size
58KB
-
MD5
340cd4f521887337aed9d61f0c1f5298
-
SHA1
bca6f0dba1eaa25469b2930d3d1c1f1c096bb792
-
SHA256
de1ea3a7dbf8ee7805bb71b03360a5a8ed4a1246e09a6de27759d97d2f6673e9
-
SHA512
b830edd3601613a7469c9b3e205d591fb0abf8e0695aa0b1329ce84e3ebb08e994e3520cca10116c33420bfffbbd9e56f4d6f4b6b40db6c2c544a19a6caa8de5
-
SSDEEP
1536:6W82C0Db1edMckBI1kmJAhTPY6pnouy8d:6n25DbaMySmJAhbvoutd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de1ea3a7dbf8ee7805bb71b03360a5a8ed4a1246e09a6de27759d97d2f6673e9
Files
-
de1ea3a7dbf8ee7805bb71b03360a5a8ed4a1246e09a6de27759d97d2f6673e9.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 112KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 48KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE