Behavioral task
behavioral1
Sample
fb7b7efcb7190f9e50a00a1e199c8cbbc5156a80cfb502c8828297a9255a6c9d.exe
Resource
win7-20240704-en
General
-
Target
fb7b7efcb7190f9e50a00a1e199c8cbbc5156a80cfb502c8828297a9255a6c9d
-
Size
161KB
-
MD5
95dfa26ac59f71b8960aa6137777958b
-
SHA1
0a9284d71c11c6d3c5ac42f4316fe1acb1f731cf
-
SHA256
fb7b7efcb7190f9e50a00a1e199c8cbbc5156a80cfb502c8828297a9255a6c9d
-
SHA512
ea5a4cc44737a52170964e79ae8db0f4919cfda129344d373a24590f33fa75257b5f6fc34916664769197c0bd9739acdf275b8cf8aacd96b1924d355f54878df
-
SSDEEP
3072:fny1tD33bSq+6WHIjN3tj6qnv0b2UrXkbvLJ:KHD7Sq+dIjNDv0bNXkbvLJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb7b7efcb7190f9e50a00a1e199c8cbbc5156a80cfb502c8828297a9255a6c9d
Files
-
fb7b7efcb7190f9e50a00a1e199c8cbbc5156a80cfb502c8828297a9255a6c9d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE