Behavioral task
behavioral1
Sample
629aec79d7d125a489b3a6b60ea4e9d64ee2a3f1d7808c1e582a4c2899f81496.exe
Resource
win7-20240704-en
General
-
Target
629aec79d7d125a489b3a6b60ea4e9d64ee2a3f1d7808c1e582a4c2899f81496
-
Size
1.0MB
-
MD5
fe94915164d976c2e2e3eb3c1014f495
-
SHA1
db05f401965a5ee1caaabaa9cb5159b27c52f24f
-
SHA256
629aec79d7d125a489b3a6b60ea4e9d64ee2a3f1d7808c1e582a4c2899f81496
-
SHA512
2b3e7a995ea2c69d68858e2e2b2a76154438938acb5d4663b0cdd1b8e5b59904f4283320d6a53f6bd05c644f50e78d5b72864b969681568f9e5e5b8764db30fe
-
SSDEEP
12288:AUaWaR5vNjqZUnijcoukUaWaR5v2jqZUnijcou:AUytVocoDUytmoco
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 629aec79d7d125a489b3a6b60ea4e9d64ee2a3f1d7808c1e582a4c2899f81496
Files
-
629aec79d7d125a489b3a6b60ea4e9d64ee2a3f1d7808c1e582a4c2899f81496.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 224KB - Virtual size: 224KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 176KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 636KB - Virtual size: 636KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE