Behavioral task
behavioral1
Sample
fd6fb0573ab70b2bd8cfde2c63e9945fd7527a3916a47d464f4be41eee4fe2a8.exe
Resource
win7-20240708-en
General
-
Target
fd6fb0573ab70b2bd8cfde2c63e9945fd7527a3916a47d464f4be41eee4fe2a8
-
Size
66KB
-
MD5
b2802c0c99f6ffdee6dfd5c32e8dc5ae
-
SHA1
58c40c3346fb5bc9636ffa34fa3058bb2875b169
-
SHA256
fd6fb0573ab70b2bd8cfde2c63e9945fd7527a3916a47d464f4be41eee4fe2a8
-
SHA512
1e16bbd37569bac2ec3ea83cfb97c64a0bd5606aae1c7ec2385680699e0eee8a10f00d830ef8b4ba3cc1ea8cd05cd12528fe2159aa019f2673835e79cb8c6b2a
-
SSDEEP
1536:vvQBeOGtrYS3srx93UBWfwC6Ggnouy8rrUxAqQQqFpbdTL:vhOmTsF93UYfwC6GIoutrAxAqQFpx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd6fb0573ab70b2bd8cfde2c63e9945fd7527a3916a47d464f4be41eee4fe2a8
Files
-
fd6fb0573ab70b2bd8cfde2c63e9945fd7527a3916a47d464f4be41eee4fe2a8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
camztlf Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE