Behavioral task
behavioral1
Sample
f3b915eb02c9dbcdbc77a6353cd5ef3e7caa41f19948743ef6f33ca0cbedcd92.exe
Resource
win7-20240708-en
General
-
Target
f3b915eb02c9dbcdbc77a6353cd5ef3e7caa41f19948743ef6f33ca0cbedcd92
-
Size
96KB
-
MD5
e2afb665b462a5aedf45db46449a9004
-
SHA1
d7cfd50b17ad039195bdc657a9edf263c18694a1
-
SHA256
f3b915eb02c9dbcdbc77a6353cd5ef3e7caa41f19948743ef6f33ca0cbedcd92
-
SHA512
93fff7e2ed4380de77aeb0e44f31ddcc5a5185d3187417ba88ed7afcee265901e98e603a2362855001a755f2ae6ae450320a3001ff5368fab83ec1acda0b76f7
-
SSDEEP
1536:NzUIb25A8ULw005o09WDuYHGjUAsOwRTkp:dUIbS5xquYmSOwRy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f3b915eb02c9dbcdbc77a6353cd5ef3e7caa41f19948743ef6f33ca0cbedcd92
Files
-
f3b915eb02c9dbcdbc77a6353cd5ef3e7caa41f19948743ef6f33ca0cbedcd92.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE