Behavioral task
behavioral1
Sample
swords_and_sandals2.exe
Resource
win7-20240903-en
General
-
Target
swords_and_sandals2.exe
-
Size
15.0MB
-
MD5
cd842fc8236cf44006b5bbef434078d7
-
SHA1
8623407e988b537268e325c0c00cc06fb996cfbd
-
SHA256
852aa83d4f34ad51f29fc515beb0b4d813a8aa772c7409ce66d92b8a99adea60
-
SHA512
bc15a9b3c29bbe0050fd5bac5f0fb1ae685b87b993d2a36af8f7e92d156accb013f5a5afec07c1749321134701b1996511fa2666b10a1c0e0fe283e2292bd34f
-
SSDEEP
393216:du9XgT7CBmTx40Adw2BJVGC/WkJR/8tIBqMpcQQrOH:duqXemTx40ApBnjOkFBfp+yH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource swords_and_sandals2.exe
Files
-
swords_and_sandals2.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 587KB - Virtual size: 588KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE