Behavioral task
behavioral1
Sample
22289a61cd8a347a03da845d34820534b3e617781447a91c6a0fb3b1e6f6a184.exe
Resource
win7-20240708-en
General
-
Target
22289a61cd8a347a03da845d34820534b3e617781447a91c6a0fb3b1e6f6a184.exe
-
Size
2.9MB
-
MD5
b3fc214094fbc7d1542542fd86d23963
-
SHA1
50f97ed0a4719a75ef7bd31c38a829ec0d155e92
-
SHA256
22289a61cd8a347a03da845d34820534b3e617781447a91c6a0fb3b1e6f6a184
-
SHA512
070ba8b6a5f6a89915f4516434b23e77b60e5a1ba87f251754ecbbd3b2616ec5de3a3939ab480ab471fb42ce82c11bdb1b51b3f6391e9ce0328c40a7b88593b1
-
SSDEEP
49152:SGCL+RB7rH7cRsZPAEXl6PxJt3rMYS3Usa5Lcq/CqjJxQA5VMvPV3/SdLS:TCU3H7lZoEXl+ft7MYSoLN/CCxQA5VsV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22289a61cd8a347a03da845d34820534b3e617781447a91c6a0fb3b1e6f6a184.exe
Files
-
22289a61cd8a347a03da845d34820534b3e617781447a91c6a0fb3b1e6f6a184.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 7.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE