Behavioral task
behavioral1
Sample
d330a92fd1953e47e4713c0a5b48347a1ca6f700f9720d659525aad12fa6686d.exe
Resource
win7-20240903-en
General
-
Target
d330a92fd1953e47e4713c0a5b48347a1ca6f700f9720d659525aad12fa6686d
-
Size
12.3MB
-
MD5
b04385d1098f1749c2e7316333b1f3f9
-
SHA1
2a35403b515ccfe4c230df63e8926c8a2ce2c56e
-
SHA256
d330a92fd1953e47e4713c0a5b48347a1ca6f700f9720d659525aad12fa6686d
-
SHA512
fed1ff69d38ffe937cc4fc53c253ffc43aedc3bb9f320f7bf36f753ce8d3b85f6fe20505917484bd7dd2198bf5a0ef5c8fe5972853b484f10eb98f3c0080339f
-
SSDEEP
393216:r9lU1Bu7qznUke2SsTM3M6hbmksdqY9Ed6601R0:huvAoUZsTwM3q6Pz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d330a92fd1953e47e4713c0a5b48347a1ca6f700f9720d659525aad12fa6686d
Files
-
d330a92fd1953e47e4713c0a5b48347a1ca6f700f9720d659525aad12fa6686d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 15.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9.8MB - Virtual size: 9.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE