Behavioral task
behavioral1
Sample
5c9126967699662f43b4967f17dde08ba309013c3c5c687d89f386420b68850f.exe
Resource
win7-20240704-en
General
-
Target
5c9126967699662f43b4967f17dde08ba309013c3c5c687d89f386420b68850f
-
Size
151KB
-
MD5
1fbfc567ce2d91c372af337cb22e9b39
-
SHA1
088f9f1810073ef6df4c192743654935a22dcc67
-
SHA256
5c9126967699662f43b4967f17dde08ba309013c3c5c687d89f386420b68850f
-
SHA512
9f91c5d543201d8ceb8b1f05a518ba231c4c0d7e8f05d659d78fc611a1e9672a7c7f35955052ad443a3887fee80a6891343a0c449ac51b5e49f08ec53602cf3c
-
SSDEEP
1536:V7Zf/FAxTWoJJ7ToTW7JJ7TGlPdA3NyaM62ot2oxQWF:fny1rkPdA9yaMDT2F
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c9126967699662f43b4967f17dde08ba309013c3c5c687d89f386420b68850f
Files
-
5c9126967699662f43b4967f17dde08ba309013c3c5c687d89f386420b68850f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE