Behavioral task
behavioral1
Sample
ff1955c1effd3ad910489b4f38730035d44881f540c194bdb1e3a23331f4bdad.exe
Resource
win7-20240903-en
General
-
Target
ff1955c1effd3ad910489b4f38730035d44881f540c194bdb1e3a23331f4bdad
-
Size
417KB
-
MD5
197758bd6bb3c24bea5e186d196706ba
-
SHA1
29a145be59c01be6e0538c127e3549f89972faa7
-
SHA256
ff1955c1effd3ad910489b4f38730035d44881f540c194bdb1e3a23331f4bdad
-
SHA512
9b90675392058d59f4079b3ee3e78865419aab423d1548ff577552ce783268cc113f637ffeae9972b12671e1fb4c7bdaacb8834ab23017aebbf8d28c331441d1
-
SSDEEP
6144:TVuQtQ18RiYdy2D04r0P0CNtAiC4rTWwpuVw7htVgjlxYVdmLjoSu:xrtBLdy2DtQNtTuw+w7hCYfkoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff1955c1effd3ad910489b4f38730035d44881f540c194bdb1e3a23331f4bdad
Files
-
ff1955c1effd3ad910489b4f38730035d44881f540c194bdb1e3a23331f4bdad.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 824KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 303KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 113KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE