Behavioral task
behavioral1
Sample
256394536ef53d90b1569a5b32da519373fda61467e20d5a9c954c6622911833.exe
Resource
win7-20240903-en
General
-
Target
256394536ef53d90b1569a5b32da519373fda61467e20d5a9c954c6622911833
-
Size
459KB
-
MD5
81e42a3e7308c56d026a4630f822a29a
-
SHA1
8576d430371eb8a271cf3bacc5a99d50cb6914c8
-
SHA256
256394536ef53d90b1569a5b32da519373fda61467e20d5a9c954c6622911833
-
SHA512
f50effa396232dd58609c67852c1fb1ae2f631264bcf26f46ff028dfe958482ff5878ec62e5ff4595ddb516a5f14db3f70cd531b72de0ae4a3f88958305e62c2
-
SSDEEP
12288:fXb1TjQ+p3rbNuqsDBFBygivAIKMV4qljNk2oSp:fXbrp3rbER9rNpIKW4qJWQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 256394536ef53d90b1569a5b32da519373fda61467e20d5a9c954c6622911833
Files
-
256394536ef53d90b1569a5b32da519373fda61467e20d5a9c954c6622911833.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 451KB - Virtual size: 452KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE