Behavioral task
behavioral1
Sample
84881b69e82d4458a3b6ec29ef5f5491ad433c3c307127c9cc4c590a89aae969.exe
Resource
win7-20240903-en
General
-
Target
84881b69e82d4458a3b6ec29ef5f5491ad433c3c307127c9cc4c590a89aae969
-
Size
1.8MB
-
MD5
ab15fb1bfc1fd599449c2096c21409df
-
SHA1
e6dd8067df285be72271e10e494759aeef8ad428
-
SHA256
84881b69e82d4458a3b6ec29ef5f5491ad433c3c307127c9cc4c590a89aae969
-
SHA512
372510b0e1522049dda3ab6f9376b80e9a972550658c47270bef45ffa0fef2d76d6c4f75268c6dd1ae1fec37a9ef69160fbc0ef277eb18d26ff52b65abf1760e
-
SSDEEP
49152:r9UAxBrFrrDgPSlqjM3smJoTTcSsDKva+ahZ4PiaaWYJL2X6:J5lqjM3U0SsDKva+ahZaS2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 84881b69e82d4458a3b6ec29ef5f5491ad433c3c307127c9cc4c590a89aae969
Files
-
84881b69e82d4458a3b6ec29ef5f5491ad433c3c307127c9cc4c590a89aae969.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
��j�u� Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE