Behavioral task
behavioral1
Sample
f281faff46f197ebd08921950332461160bad028b5bf983fe0cca5c0b5e6ccdc.exe
Resource
win7-20240903-en
General
-
Target
f281faff46f197ebd08921950332461160bad028b5bf983fe0cca5c0b5e6ccdc
-
Size
172KB
-
MD5
c9000fb4b3f7ba325ab81559363bd890
-
SHA1
a807b7313d9d42c7a63dabf4d5c46f3149310b65
-
SHA256
f281faff46f197ebd08921950332461160bad028b5bf983fe0cca5c0b5e6ccdc
-
SHA512
dd8306fa628fd5d9159f091ea47baa8dfe26e91d3c3d80ac107c47a5edad02d706964a4959b0129bd33d01e8a308b0f27b9a8dab9db21c0086e81c64f6e8546b
-
SSDEEP
384:bgPvv4gPvvzQSdM+FagXDQ4vEHV49Rp0HOruPTjjDqgPvv4gPvvzQSdM+Fa/XDQv:bbfctEkEOn0LPT+bfciEkEOn0LPT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f281faff46f197ebd08921950332461160bad028b5bf983fe0cca5c0b5e6ccdc
Files
-
f281faff46f197ebd08921950332461160bad028b5bf983fe0cca5c0b5e6ccdc.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE