Behavioral task
behavioral1
Sample
05b1a7b179476fa3f744d432482cdc99d74d26f4d996cd08bd7308104c36623b.exe
Resource
win7-20240704-en
General
-
Target
05b1a7b179476fa3f744d432482cdc99d74d26f4d996cd08bd7308104c36623b
-
Size
2.2MB
-
MD5
d63ef84966b1b8c261cda2676d5006d2
-
SHA1
5259dce9b8b22173444558238b154eb6094ea401
-
SHA256
05b1a7b179476fa3f744d432482cdc99d74d26f4d996cd08bd7308104c36623b
-
SHA512
74fa8fa1fcbdb3cc36d9583ce9196e998b931ce70d381ca9b3314a318a23e705863cfe368c4b17272e371e43aabf99796e6319f2817880fa8de085ed1412d94e
-
SSDEEP
49152:FWfy9T5WXwxMgyJEOLoXQUw9nFASmSai7GtfplZU8ozH:0fWUXstMr92w1D8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05b1a7b179476fa3f744d432482cdc99d74d26f4d996cd08bd7308104c36623b
Files
-
05b1a7b179476fa3f744d432482cdc99d74d26f4d996cd08bd7308104c36623b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.1MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 664B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
�Oz��u� Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE