Behavioral task
behavioral1
Sample
fe168073d96058d41421a652a8088e8b9d11488ccd884cea35f1d61505aa42da.exe
Resource
win7-20240903-en
General
-
Target
fe168073d96058d41421a652a8088e8b9d11488ccd884cea35f1d61505aa42da
-
Size
9.6MB
-
MD5
d040679a721b1c2310c3eff970fa25ab
-
SHA1
14faa826fb46ba6b25af626edbbe564818d11e7e
-
SHA256
fe168073d96058d41421a652a8088e8b9d11488ccd884cea35f1d61505aa42da
-
SHA512
1ca8da482cd7326f51c9aea57d41130d729ecdff10c95817dda5c06747c5e174ec752fc37bfae5c85a765b0cb7db019f0f18b78f54fa67fef893502850805fc2
-
SSDEEP
196608:imCCJzdno2PNaci0/RXMm/UGC/PZaa8d4GZSlJb:imCCJBno2PNTi0ZXPK/PZFKSlx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe168073d96058d41421a652a8088e8b9d11488ccd884cea35f1d61505aa42da
Files
-
fe168073d96058d41421a652a8088e8b9d11488ccd884cea35f1d61505aa42da.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 14.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE