Behavioral task
behavioral1
Sample
ac58d86a5167802789833aee4dffde547d5395560f83d5d343c7b6b0cee6da22.exe
Resource
win7-20240704-en
General
-
Target
ac58d86a5167802789833aee4dffde547d5395560f83d5d343c7b6b0cee6da22
-
Size
6.0MB
-
MD5
17f387e4f282915aa602790051fdb4bd
-
SHA1
3c422f8af36d81c5c4a4dbe16b2bfec90018accc
-
SHA256
ac58d86a5167802789833aee4dffde547d5395560f83d5d343c7b6b0cee6da22
-
SHA512
e24ae70e2b7be0d1fee9f2dbd4cdbb3bead46d03e4db4a96bbfbe61a96806bb9a015ca55a0e471cd3be76e4c98b430475bd47e8f96d8efd7d807627812469b34
-
SSDEEP
98304:zjnHFyT9akhWDjSHecak9i7GiJacakWSQgGZTtSjOuHcak9i7GiJacakdnqUg1Vv:zMQk+SHedTudtzxkjVHdTudWnCfGAdTp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac58d86a5167802789833aee4dffde547d5395560f83d5d343c7b6b0cee6da22
Files
-
ac58d86a5167802789833aee4dffde547d5395560f83d5d343c7b6b0cee6da22.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE