Behavioral task
behavioral1
Sample
d02fe91e45f680f7c749a87861bb5b15c3250d8d5f4733f921a73cd87333bd66.exe
Resource
win7-20240704-en
General
-
Target
d02fe91e45f680f7c749a87861bb5b15c3250d8d5f4733f921a73cd87333bd66
-
Size
213KB
-
MD5
9f3edb06944551c8c11c70d36829641e
-
SHA1
2250294fc52cf6c99b9d45dcb524e9e2e61a95f9
-
SHA256
d02fe91e45f680f7c749a87861bb5b15c3250d8d5f4733f921a73cd87333bd66
-
SHA512
d9c1629dfc436049a20dcca7e2e9e77a46bfcd4bea39eb7e2bd837830e11d8c43848b1f0cbdda1fe6cfcc134440569bed9350eeabe622f2add27975629c4517b
-
SSDEEP
6144:+2pdqfv2IPOGfXf5ovWJU1/UwmUbWXHmAkH/:/crxfP507gxNkf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d02fe91e45f680f7c749a87861bb5b15c3250d8d5f4733f921a73cd87333bd66
Files
-
d02fe91e45f680f7c749a87861bb5b15c3250d8d5f4733f921a73cd87333bd66.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE