Behavioral task
behavioral1
Sample
91dbf9e6fa04c54fb811b4980414c15fd5727b9b055a844cf8e4f3d6cd7b5e11.exe
Resource
win7-20240903-en
General
-
Target
91dbf9e6fa04c54fb811b4980414c15fd5727b9b055a844cf8e4f3d6cd7b5e11
-
Size
126KB
-
MD5
32e21ef7ad24d5c20d6312c1c5b6d771
-
SHA1
c00a42c402dd4c29a5f1b62e85da7959810d847e
-
SHA256
91dbf9e6fa04c54fb811b4980414c15fd5727b9b055a844cf8e4f3d6cd7b5e11
-
SHA512
16ee05c1d0ace474d918e3ff3249df75ec89e821ef913153d151ddb4c720740cf6a58ec4c2f8e3683422b98abd8c96e0cb1a3dbe255a6d7b1cc8bbb428c08d04
-
SSDEEP
3072:ohOmTsF93UYfwC6GIoutX8KiUcPB77k9YFvjB:ocm4FmowdHoSHqPkYFbB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 91dbf9e6fa04c54fb811b4980414c15fd5727b9b055a844cf8e4f3d6cd7b5e11
Files
-
91dbf9e6fa04c54fb811b4980414c15fd5727b9b055a844cf8e4f3d6cd7b5e11.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 82KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE