Behavioral task
behavioral1
Sample
480e6d67c6a84e73bc0a566458069229399b7c0a4d4610e9c65dae87e2fdc6d4.exe
Resource
win7-20240903-en
General
-
Target
480e6d67c6a84e73bc0a566458069229399b7c0a4d4610e9c65dae87e2fdc6d4
-
Size
15.6MB
-
MD5
3fc059d9463caba449213b31134fc6e2
-
SHA1
4b8801a067d8dec36e709dc80d0eb0a1d39bf76d
-
SHA256
480e6d67c6a84e73bc0a566458069229399b7c0a4d4610e9c65dae87e2fdc6d4
-
SHA512
a322ad250d2d53a75b153b7c6b58a8ee7fb47d2a49087d0feefe06b0dcc54f846b1d084afd42c3e8c31f11ed0c3ff18b363b4ceab438398f3cecb9d697395181
-
SSDEEP
393216:OTgiiTx57lgpQswC+vCZ8wdCj4RoTqKRhSLN3wowgWGSrJtdH:OGjs3C6o2ku3Cr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 480e6d67c6a84e73bc0a566458069229399b7c0a4d4610e9c65dae87e2fdc6d4
Files
-
480e6d67c6a84e73bc0a566458069229399b7c0a4d4610e9c65dae87e2fdc6d4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15.2MB - Virtual size: 15.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 351KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE