Behavioral task
behavioral1
Sample
206869741d0866914e3dafcec92caff220e047d52465c1b7e3a5d5a842f7543b.exe
Resource
win7-20240903-en
General
-
Target
206869741d0866914e3dafcec92caff220e047d52465c1b7e3a5d5a842f7543b
-
Size
1.5MB
-
MD5
c49bef20fcce02d75f699a39e9b42512
-
SHA1
111b1469f4d1b10ba406224d65327d5e33dc25f1
-
SHA256
206869741d0866914e3dafcec92caff220e047d52465c1b7e3a5d5a842f7543b
-
SHA512
11388a6a0e712fbc827ef08d64eced285fbf7c3514314e5ecf76b8e7fa856531ab0be816280c88b56a8f547ce25f56410a8ffc83671d544535bb280692ca5fb3
-
SSDEEP
24576:4Tw4KFnqO7tLQKynPeFVJKGAAw71zAN9e3iDZ7HNOPqVDwFp5NQFkR+kz1lQta2n:4UTVqO7RQKOPeFVJKr7GCijcuDqCFigh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 206869741d0866914e3dafcec92caff220e047d52465c1b7e3a5d5a842f7543b
Files
-
206869741d0866914e3dafcec92caff220e047d52465c1b7e3a5d5a842f7543b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 4.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE