Behavioral task
behavioral1
Sample
608dfa00eb69d3baa769b557329ed7d472502d1548cb769a28a63677e475b725.exe
Resource
win7-20240705-en
General
-
Target
608dfa00eb69d3baa769b557329ed7d472502d1548cb769a28a63677e475b725
-
Size
7.0MB
-
MD5
4cbb99af05bbc230373365c17ff87cdc
-
SHA1
9f27aa3eaa39b051f3ce8448503c0c124dcb815d
-
SHA256
608dfa00eb69d3baa769b557329ed7d472502d1548cb769a28a63677e475b725
-
SHA512
ee668bcaa571d66b258387640557da04a385a40473881db32e2cf01ab0ea522ee70dc8f10e9b5a47da612137a174034110ae5e1305cc23f24bc0abec56f4ad09
-
SSDEEP
49152:8iXB8lwB5yFO+n0A+nQuedWKTaT4TIm30lN8rhhgZu3I2njFdWKTaT4TIm3n:BKlwq4Z5QjVCc16NMKSIyjFVCc1n
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 608dfa00eb69d3baa769b557329ed7d472502d1548cb769a28a63677e475b725
Files
-
608dfa00eb69d3baa769b557329ed7d472502d1548cb769a28a63677e475b725.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 6.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 159KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE