Behavioral task
behavioral1
Sample
36cfe14e8058d98e526cff4dc6995bd073fe8bc38b305342b065947439c29e11.exe
Resource
win7-20240903-en
General
-
Target
36cfe14e8058d98e526cff4dc6995bd073fe8bc38b305342b065947439c29e11
-
Size
332KB
-
MD5
f73281b33a9a58b8453dbaa584ad5fc3
-
SHA1
1fa086e738f664868238563cbaa23114b429e8ba
-
SHA256
36cfe14e8058d98e526cff4dc6995bd073fe8bc38b305342b065947439c29e11
-
SHA512
f2177b3d3d54dd5d720e2b37e027c7496dd009ad5069b00fa2d39b4373b78b0a50a128f4b940f68d7a9090471cb281e1241008c303562799f402436483e32f76
-
SSDEEP
6144:Lcm4FmowdHoSHt251UriZFwfsDX2UznsaFVNJCMKAbel:R4wFHoSHYHUrAwfMp3CDl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36cfe14e8058d98e526cff4dc6995bd073fe8bc38b305342b065947439c29e11
Files
-
36cfe14e8058d98e526cff4dc6995bd073fe8bc38b305342b065947439c29e11.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE