Behavioral task
behavioral1
Sample
2148571fe1d6f50fef2c4dfb0e44378a61088a208d1bf8b1758bead7f4ca745c.exe
Resource
win7-20240704-en
General
-
Target
2148571fe1d6f50fef2c4dfb0e44378a61088a208d1bf8b1758bead7f4ca745c
-
Size
8.4MB
-
MD5
709be6b3891332823659ab0c7cb1f20b
-
SHA1
e8a55baeb3951c8e4c92c0f9c9b5bee0e35878e3
-
SHA256
2148571fe1d6f50fef2c4dfb0e44378a61088a208d1bf8b1758bead7f4ca745c
-
SHA512
d51346852272e69b5c20645970c32ad6afae2bb6e392a53053ea565b599738c9aa507b4df0a4676aff031a4ec8579a4ec591a07623e1d1eb14f923e5f74ba538
-
SSDEEP
196608:Vsssssssssssssssssssssssssssssssssssssssssss5222222222222222222m:Vssssssssssssssssssssssssssssssv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2148571fe1d6f50fef2c4dfb0e44378a61088a208d1bf8b1758bead7f4ca745c
Files
-
2148571fe1d6f50fef2c4dfb0e44378a61088a208d1bf8b1758bead7f4ca745c.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 80KB - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 65KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE