Behavioral task
behavioral1
Sample
dc974185f653a8fb8c6f92ac355755d0N.exe
Resource
win7-20240705-en
General
-
Target
dc974185f653a8fb8c6f92ac355755d0N.exe
-
Size
330KB
-
MD5
dc974185f653a8fb8c6f92ac355755d0
-
SHA1
22d5170b28a43dd541e32795e6b0bb613879b448
-
SHA256
5f2205f941b44e5ae5e7e44a8906b189c8a5b3c87a8b61ac45e3ddfbbceb7023
-
SHA512
17a956c000af6b506c65a3c9fb5655c7eaab225f251f710a261bba133b97521f0b8e64ff6974168747654ec8757fd9b1432bd2b8fdb66e23fe333587de6d0a8f
-
SSDEEP
6144:Lcm4FmowdHoSHt251UriZFwfsDX2UznsaFVNJCMKAbew:R4wFHoSHYHUrAwfMp3CDw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc974185f653a8fb8c6f92ac355755d0N.exe
Files
-
dc974185f653a8fb8c6f92ac355755d0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE