Behavioral task
behavioral1
Sample
13bd52d92369b3ab54b2837afdb3ac54e26fe7456c6d9e286c27c41b2c23a269.exe
Resource
win7-20240708-en
General
-
Target
13bd52d92369b3ab54b2837afdb3ac54e26fe7456c6d9e286c27c41b2c23a269
-
Size
212KB
-
MD5
01be7d03f0788f52f6ee56718817cdab
-
SHA1
dee567980bba8f6c2234fd06675a88d2cd244a88
-
SHA256
13bd52d92369b3ab54b2837afdb3ac54e26fe7456c6d9e286c27c41b2c23a269
-
SHA512
b4958559cce4628ecefb35ad7339510a26fbd311560f3e16809c14bdf8771867205bc0a0cb7d1dd89a03322a88576c99eaa12041d0fef39dc254f2e678ad95d7
-
SSDEEP
1536:xJP7PEBid2CKTF8qyfZGT7IkYAIKzo7vc+LAp7Qq:xJP7PEY25T2pB07xYAFIv5Ep7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13bd52d92369b3ab54b2837afdb3ac54e26fe7456c6d9e286c27c41b2c23a269
Files
-
13bd52d92369b3ab54b2837afdb3ac54e26fe7456c6d9e286c27c41b2c23a269.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE