Behavioral task
behavioral1
Sample
15022bab3669e97c42f70f0a1c9355709ad14f7533d3d21eb6b501d087aa828b.exe
Resource
win7-20240903-en
General
-
Target
15022bab3669e97c42f70f0a1c9355709ad14f7533d3d21eb6b501d087aa828b
-
Size
33KB
-
MD5
71cd7ea18363a001865bbc9c52ea6f3a
-
SHA1
b58180307273973a16e5d47df809244ca69901ba
-
SHA256
15022bab3669e97c42f70f0a1c9355709ad14f7533d3d21eb6b501d087aa828b
-
SHA512
5e9f25f6fc196d4b5136cb200fe8e89cf827c7e7f79005fb2a2121f816764984627eda1aac716559e3b63a9cc0ca0bfc07f49423cdd72613fbf19ffed37437b8
-
SSDEEP
768:R9gTf59gTf59gTf59gTf59gTf59gTfL9gTfL9gTf:R9gTf59gTf59gTf59gTf59gTf59gTfL/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15022bab3669e97c42f70f0a1c9355709ad14f7533d3d21eb6b501d087aa828b
Files
-
15022bab3669e97c42f70f0a1c9355709ad14f7533d3d21eb6b501d087aa828b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE