Behavioral task
behavioral1
Sample
1d5cbfd302c85cc152f69116b8ae003be6f1eaecaabafc671405acbf0f091a93.exe
Resource
win7-20240903-en
General
-
Target
1d5cbfd302c85cc152f69116b8ae003be6f1eaecaabafc671405acbf0f091a93
-
Size
9.7MB
-
MD5
216923d25b58e75754e82face1698d64
-
SHA1
a10c8d5e27e6fe885283392aa1bdab4ed0fbdf82
-
SHA256
1d5cbfd302c85cc152f69116b8ae003be6f1eaecaabafc671405acbf0f091a93
-
SHA512
3b767a3ec36c7adb0250c3c5fb364f4c3ebd7042aa989d92abe85ac6455dfa8375002a33793d8bda30977d0e5599ff34f48927c216138141544c8d3756dc8038
-
SSDEEP
196608:qt6YxxPBv9XcKqmw/A/+UgQPC7ySGu3noOLKWyjVswNSaR:wv9XcKnUAC7yzkXKWCVoaR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1d5cbfd302c85cc152f69116b8ae003be6f1eaecaabafc671405acbf0f091a93
Files
-
1d5cbfd302c85cc152f69116b8ae003be6f1eaecaabafc671405acbf0f091a93.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 11.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 6.8MB - Virtual size: 6.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 160KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE