Behavioral task
behavioral1
Sample
Installer.exe
Resource
win7-20240729-en
General
-
Target
Installer.exe
-
Size
8KB
-
MD5
7357e304170252a7377d329245886b82
-
SHA1
e4efe262682d5d5f8cf5137f8f8265e536c11920
-
SHA256
baab2450e83bc2442da317e0b994a9ec820173cedbc7d799f4ab5425f0effc4e
-
SHA512
f8729cc028629c8dd0fb06dc79729f14ff6f953f053f026f353982cc270563cba752fe308581970ce30dc5ea5e4d7faf7f625b0ca047112d8efc905e3e0a10b1
-
SSDEEP
192:S4N92oIGUfYYkg2hHFaNJhLkwcud2DH9VwGfctlCO:S4aTYu2hlaNJawcudoD7Ub
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Installer.exe
Files
-
Installer.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE