Behavioral task
behavioral1
Sample
f28b2e4073b7669a3accaa9685ecb9db736d223cdd715c49e8d2a5632a14e91d.exe
Resource
win7-20240705-en
General
-
Target
f28b2e4073b7669a3accaa9685ecb9db736d223cdd715c49e8d2a5632a14e91d
-
Size
94KB
-
MD5
3b53f0837183b277d5e6c973cb226044
-
SHA1
f467f68a0ba8b15ebd2090e8e5bdc7eccb56f617
-
SHA256
f28b2e4073b7669a3accaa9685ecb9db736d223cdd715c49e8d2a5632a14e91d
-
SHA512
c442b0189c3812bc74a4b5084680f6276c6a9d9b6e97c2c2eb638a1aaace81c4dd83ebfd32ca439e24df337ab7cd6f6d8bc467925a6b7b06de297f63c1049155
-
SSDEEP
1536:xvQBeOGtrYS3srx93UBWfwC6Ggnouy8q5kNJ8mGltIIgKsQRV6NzcQSBYK4Gppv:xhOmTsF93UYfwC6GIoutqiJ8mqtbfKzS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f28b2e4073b7669a3accaa9685ecb9db736d223cdd715c49e8d2a5632a14e91d
Files
-
f28b2e4073b7669a3accaa9685ecb9db736d223cdd715c49e8d2a5632a14e91d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE