Behavioral task
behavioral1
Sample
dc8a79a0db2f520426af0293ccaea2a19a4d50092dd1da3c77611324147c8e91.exe
Resource
win7-20240903-en
General
-
Target
dc8a79a0db2f520426af0293ccaea2a19a4d50092dd1da3c77611324147c8e91
-
Size
10.5MB
-
MD5
618b0fc013213d5d2d251bef7a484924
-
SHA1
48656335bd7ede20aeab3ed580af6a81281907a5
-
SHA256
dc8a79a0db2f520426af0293ccaea2a19a4d50092dd1da3c77611324147c8e91
-
SHA512
c7731f4faaea9ae039bb4c3fd680898900aa13ded3a49f5eea0aed1e1733dd434444221a4e7e17f5aaeb95793826557718393435defc72ec6094411e20e41826
-
SSDEEP
196608:iuKZtcsvnr6pK0j7xma2zIZHHJp+jVqHwHiBjooyEFgAw5+MEo1Vh9tzPvPdkoDP:Etcs07xvL+jVq/ioJFY8ReVhPzPdTP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc8a79a0db2f520426af0293ccaea2a19a4d50092dd1da3c77611324147c8e91
Files
-
dc8a79a0db2f520426af0293ccaea2a19a4d50092dd1da3c77611324147c8e91.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 10.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 41KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE