Behavioral task
behavioral1
Sample
15015b944b917dd903cc6e830f7d55deca970a470433ff8c8f93d0b2a7049ee4.exe
Resource
win7-20240704-en
General
-
Target
15015b944b917dd903cc6e830f7d55deca970a470433ff8c8f93d0b2a7049ee4
-
Size
15.6MB
-
MD5
16791fa1f7c0f7630ce9a5cd1a38874b
-
SHA1
3c036ff3cd0faff83b136ed052c30a551742406b
-
SHA256
15015b944b917dd903cc6e830f7d55deca970a470433ff8c8f93d0b2a7049ee4
-
SHA512
64d4314f73794e9646efebc0c215825bb7232a5c74febc446efd0fd2c412dbb357bb6c3656a268c163344712b8489260f2cffdf25cb630649ec879aca0af4d7a
-
SSDEEP
393216:h5pL1OeMFgSX3drgdGHe8/TPN3aEs4KDlJEiSeQo+xY+nc:h5V11MJ/+sdaEs4KDPTSeMxY+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15015b944b917dd903cc6e830f7d55deca970a470433ff8c8f93d0b2a7049ee4
Files
-
15015b944b917dd903cc6e830f7d55deca970a470433ff8c8f93d0b2a7049ee4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15.2MB - Virtual size: 15.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 351KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE