Behavioral task
behavioral1
Sample
855ad44d129eb9becff00fbe19dd0fd78ef19ab5f8afb49e322da1efda1fcb77.exe
Resource
win7-20240708-en
General
-
Target
855ad44d129eb9becff00fbe19dd0fd78ef19ab5f8afb49e322da1efda1fcb77
-
Size
6.4MB
-
MD5
2c0c044ffcb08c9d0388199483d9b4b0
-
SHA1
47b573174712b07f1ac9b6e5ec308239144cd4f0
-
SHA256
855ad44d129eb9becff00fbe19dd0fd78ef19ab5f8afb49e322da1efda1fcb77
-
SHA512
1ffb31cbc0ddcafb8b6c755522c3d1103993a82522ff2a41291fcd6785ee253c15a0dd7fa7fbaa63492fbe5b60c706621e2cd862f7fb44d484ee18f309059f2f
-
SSDEEP
12288:PHkVE9oYT0WGYP0WGYP0WGYP0WGYP0WGYP0WGYP0WGYP0WGYP0WGYP0WGYK:cVMtttttttttK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 855ad44d129eb9becff00fbe19dd0fd78ef19ab5f8afb49e322da1efda1fcb77
Files
-
855ad44d129eb9becff00fbe19dd0fd78ef19ab5f8afb49e322da1efda1fcb77.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 280KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 145KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE