Behavioral task
behavioral1
Sample
.exe
Resource
win7-20240903-en
General
-
Target
.exe
-
Size
15.6MB
-
MD5
5bc726cc0ff76578cfe2e5c81d3b1e03
-
SHA1
9c183686b11219e5545f4573dfffb60c94ba6e3d
-
SHA256
74b433fc938cfc19967dffe5d389b0da29e079dc407e775ea50d5b1dc9e8b7e1
-
SHA512
cd3cd451c48341681dc8e47a4117066acbf44a37ba9190ccb991c30bc05f3dfcee8b7ceb4155074dc02cb41ee5d9c028378946fb468406a3262edb52358a3bb0
-
SSDEEP
393216:Lfr4/GcQQknDpbcJyvxa+W1w1rAyHspQq+cUM:7vQknDS4a+JWmPM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource .exe
Files
-
.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 10.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 41KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE