Behavioral task
behavioral1
Sample
14b95fb2e03c446ddd1ab19048b30dcbc98a2f68bb33013af26fc7bb5d19cb78.exe
Resource
win7-20240708-en
General
-
Target
14b95fb2e03c446ddd1ab19048b30dcbc98a2f68bb33013af26fc7bb5d19cb78
-
Size
10.3MB
-
MD5
c0a24f869b78a9ae9256f2786a067d57
-
SHA1
276fe38175f8225473dface5f6ed92637cd5bf9a
-
SHA256
14b95fb2e03c446ddd1ab19048b30dcbc98a2f68bb33013af26fc7bb5d19cb78
-
SHA512
b39478f3dd1ee7817f6a789b30357e578ca1cb9e7d6117afb4726a1e213bcf51badb1132499e4e2ee6ad2588c1b9e2d6a4a45888197ea7a4c4e5f5ae615c7bfa
-
SSDEEP
196608:OCmaT8jRCM9Y5PcwXj5R/xqWbigKxn/mHkdf2eNWHW7dtODSdwlr:MuKCM9iPcO5bqWbxKIkdeAWHgdwDSm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14b95fb2e03c446ddd1ab19048b30dcbc98a2f68bb33013af26fc7bb5d19cb78
Files
-
14b95fb2e03c446ddd1ab19048b30dcbc98a2f68bb33013af26fc7bb5d19cb78.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 7.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 10.3MB - Virtual size: 10.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE