Behavioral task
behavioral1
Sample
370d544f9fa0e7b929ace180fc032910dbdc9426860c092b8efce4a6f8be4b36.exe
Resource
win7-20240903-en
General
-
Target
370d544f9fa0e7b929ace180fc032910dbdc9426860c092b8efce4a6f8be4b36
-
Size
4.5MB
-
MD5
db661bf155d788fa98f6f5311ef158b4
-
SHA1
72b1a153607d6ca802339a14616201d63e09113d
-
SHA256
370d544f9fa0e7b929ace180fc032910dbdc9426860c092b8efce4a6f8be4b36
-
SHA512
3e4aaebb0d3643f30f5e05121f92954efefb8ec880d29cc0ddee014758567357f9ffc99df68a192e148f10fdeb650bdcfdb452c2c104a043cfa1f3c45893b3ca
-
SSDEEP
98304:b+uhMz1+Gcs4Enr6pnKm3NeKV1UW7xmLuofTzIZcWHM4y1:iuKZtcsvnr6pK0j7xma2zIZHHJ4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 370d544f9fa0e7b929ace180fc032910dbdc9426860c092b8efce4a6f8be4b36
Files
-
370d544f9fa0e7b929ace180fc032910dbdc9426860c092b8efce4a6f8be4b36.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 10.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 41KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE