Behavioral task
behavioral1
Sample
5ff9fe44def3b9c043b4138a24cd65b3b71a6fe96e2c83cae68de28d1ec18ade.exe
Resource
win7-20240708-en
General
-
Target
5ff9fe44def3b9c043b4138a24cd65b3b71a6fe96e2c83cae68de28d1ec18ade
-
Size
2.3MB
-
MD5
670742c3351fcad9ab906342a7d9c045
-
SHA1
b7a684f4822a47bfaa2ace9792ab847be2acfc67
-
SHA256
5ff9fe44def3b9c043b4138a24cd65b3b71a6fe96e2c83cae68de28d1ec18ade
-
SHA512
b5a74096f8d62dbe23ff65dd92504af2424aaea4669f86d8b7213292caae9e2df5d6b4e815f0122bcb57273c5eb78fb297e57d0e17bf442b7b0152ca1e304a13
-
SSDEEP
49152:ngzf+sYG7jHsPT7iOpH02Q7Zibl1ON0cDTuWW4226WLLO:Off5/yity1o0cDH8xmO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ff9fe44def3b9c043b4138a24cd65b3b71a6fe96e2c83cae68de28d1ec18ade
Files
-
5ff9fe44def3b9c043b4138a24cd65b3b71a6fe96e2c83cae68de28d1ec18ade.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 3.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 61KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE