Behavioral task
behavioral1
Sample
051dc667c1c3a1f75549b501f089a4dd767b97e58f1b28be73559a2392d0ef31.exe
Resource
win7-20240729-en
General
-
Target
051dc667c1c3a1f75549b501f089a4dd767b97e58f1b28be73559a2392d0ef31
-
Size
227KB
-
MD5
5abc0a6a24466e0b56411efb842f3a47
-
SHA1
2e9ff8d39f42f39073759a8b155b62711b0aa209
-
SHA256
051dc667c1c3a1f75549b501f089a4dd767b97e58f1b28be73559a2392d0ef31
-
SHA512
4596e73eb2cb06a2a2b2eafe4379640b3a39472628a23a2e49b65380b6a83afe9f63f42a9949616cf88c9211593d291350101eddd45ff1588349991beb38919a
-
SSDEEP
6144:jvNzUzbF68H3S8+b6uyptXIi9u/mp8saZHRD4v4M84Z9YkF/GeHNHyORQdcIKts:jvw68XS8+d8HamysaZHRD44M3ZzF/Geu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 051dc667c1c3a1f75549b501f089a4dd767b97e58f1b28be73559a2392d0ef31
Files
-
051dc667c1c3a1f75549b501f089a4dd767b97e58f1b28be73559a2392d0ef31.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ