Behavioral task
behavioral1
Sample
45881d1e16c3af82f797ce966656d9c0f8d5b7209d5a4c4e3ddf822025f56ed3.exe
Resource
win7-20240704-en
General
-
Target
45881d1e16c3af82f797ce966656d9c0f8d5b7209d5a4c4e3ddf822025f56ed3
-
Size
135KB
-
MD5
b221af08eef9b618918c4b6c64e11b93
-
SHA1
e33baa6fe7072161ff48fa353482f2a26b989773
-
SHA256
45881d1e16c3af82f797ce966656d9c0f8d5b7209d5a4c4e3ddf822025f56ed3
-
SHA512
617aa635402b1487137ccc3c4ce7c48f5e04a60e2a46d38391a49de0d4b3e6c9319da16f378376fd1d881341be7b57ed3899b879373ca65260bc8a85b4a75cfb
-
SSDEEP
1536:YGYU/W2/HG6QMauSV3ixJJ8dLrmhH7i9eNOOV0GqMIK7aGZhPOnp:YfU/WF6QMauSuJoWNi9eNOs007NZpOnp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45881d1e16c3af82f797ce966656d9c0f8d5b7209d5a4c4e3ddf822025f56ed3
Files
-
45881d1e16c3af82f797ce966656d9c0f8d5b7209d5a4c4e3ddf822025f56ed3.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 64KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE