Behavioral task
behavioral1
Sample
091c37083e252c24fced64d4be48bf70.exe
Resource
win7-20240705-en
General
-
Target
091c37083e252c24fced64d4be48bf70.bin
-
Size
7.7MB
-
MD5
091c37083e252c24fced64d4be48bf70
-
SHA1
f17b0ced32693c1a13f43e5ef5aa02c781f29d2f
-
SHA256
c7269b3b9557abe55ba2b1c1bf9ac20d22ef575cd4841dd66a47ef9efbba6134
-
SHA512
0dc7f43e02c64c312772b3af8caef286d5e076a56b84fae52dd3462301621332b7ce7bcccd4828331c9ef82775facc0768664b1e784347aada3f4f1c22a3311d
-
SSDEEP
49152:IYkgsrEk13adYGcsPDvOI///9TFbfscEmKev3KcYq1r7RISY4+jfC09VbGR0T1cn:IY5ykYeo1c0tkStykq160nNhS9Yw8OI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 091c37083e252c24fced64d4be48bf70.bin
Files
-
091c37083e252c24fced64d4be48bf70.bin.exe windows:4 windows x86 arch:x86
9973fdd4b86d866b3faa39fa66cf7e0a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
WriteFile
ReadFile
GetWindowsDirectoryA
GetLastError
FindNextFileA
FindFirstFileA
FindClose
FileTimeToLocalFileTime
FileTimeToDosDateTime
ExitProcess
DeleteFileA
CreateMutexA
CreateFileA
CopyFileA
CloseHandle
GetCurrentThreadId
GetLastError
ExitProcess
WriteFile
UnhandledExceptionFilter
SetFilePointer
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
GetStdHandle
GetFileSize
GetFileType
CreateFileA
CloseHandle
GetCommandLineA
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleA
GetModuleFileNameA
FreeLibrary
HeapFree
HeapReAlloc
HeapAlloc
GetProcessHeap
advapi32
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegFlushKey
RegCreateKeyExA
RegCloseKey
user32
CharNextA
Sections
UPX0 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE