Behavioral task
behavioral1
Sample
81db92c3c8fbd46a9e4e0ba96844d947.exe
Resource
win7-20240705-en
General
-
Target
81db92c3c8fbd46a9e4e0ba96844d947.bin
-
Size
69KB
-
MD5
81db92c3c8fbd46a9e4e0ba96844d947
-
SHA1
0efcdf73caa37aed2882c1221562a31b199ba7a2
-
SHA256
31295ededbdceda051bfd9d7d82d3da25f89e333b3fff76eb55c61b7521cad85
-
SHA512
55c59fef2015058423b276d7239ebb09fafe2554b3505a1bde67ebe996afb51be40683f54d0fb0d684a622b34e03a11ae0fef05b7fd0ec028d2ac1f83761d857
-
SSDEEP
1536:51bwhX2hzXxeVSIVbsFQVUi9ySMnhnjhSMtSxH17V:jbwkzUVbOoySMnFjhSMAxRV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 81db92c3c8fbd46a9e4e0ba96844d947.bin
Files
-
81db92c3c8fbd46a9e4e0ba96844d947.bin.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE