Behavioral task
behavioral1
Sample
af1499db9d44a3bee63878e6de0f55563fa7eda463cd92a13b7594219d14b9bb.exe
Resource
win7-20240903-en
General
-
Target
af1499db9d44a3bee63878e6de0f55563fa7eda463cd92a13b7594219d14b9bb
-
Size
4.0MB
-
MD5
c24d276b0a064537e7a654de0f16d163
-
SHA1
f8d47bed61aeed3558ec1f039f8e10884dc2717a
-
SHA256
af1499db9d44a3bee63878e6de0f55563fa7eda463cd92a13b7594219d14b9bb
-
SHA512
7e2163b594672c52cd62d01380ad5309bf911a928c550f82b2a6c06667390847f7723353d620ea08472a9b8673db9dc525bcb5af8f5719e0e6705a34ba488da0
-
SSDEEP
98304:+hAsRb1Yoye3LwHjy5OCH/65aYNCJ/op:+hAsX6Uwu5DH/mah/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af1499db9d44a3bee63878e6de0f55563fa7eda463cd92a13b7594219d14b9bb
Files
-
af1499db9d44a3bee63878e6de0f55563fa7eda463cd92a13b7594219d14b9bb.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3.9MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 83KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE