Behavioral task
behavioral1
Sample
fb6a0b73bd628d9ae05738163641dae6828a66e49fa932981256ee37d8ea310a.exe
Resource
win7-20240708-en
General
-
Target
fb6a0b73bd628d9ae05738163641dae6828a66e49fa932981256ee37d8ea310a
-
Size
2.2MB
-
MD5
0bae9d8687009286bb21c904bf8b0f56
-
SHA1
83e25b655c20e77bf9e4fa4353396382af9834d5
-
SHA256
fb6a0b73bd628d9ae05738163641dae6828a66e49fa932981256ee37d8ea310a
-
SHA512
698240bc67d638a193f6263e123085989a31dfc84c82ac29ec4da4b1613a3a98d81d3a18ed1e0468cc9ea0d7152182f251d5687ed238b3203ba3e7a23b2975e4
-
SSDEEP
49152:BDp1gaGlxbSXvT+2z6/Zk6Zhb3AvYx7aUpSEFKjRqmhdIuozv8kW:RgaYIvT+2y2YtppqRqmHIh4n
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb6a0b73bd628d9ae05738163641dae6828a66e49fa932981256ee37d8ea310a
Files
-
fb6a0b73bd628d9ae05738163641dae6828a66e49fa932981256ee37d8ea310a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 103KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE