Behavioral task
behavioral1
Sample
db947ee309d5e7ccc87241d97c7771487ee2a71987714fe4c3abd873b5d93a11N.exe
Resource
win7-20240903-en
General
-
Target
db947ee309d5e7ccc87241d97c7771487ee2a71987714fe4c3abd873b5d93a11N
-
Size
130KB
-
MD5
33b68ed659b4bfdea734814f94cbd7c0
-
SHA1
99624651fcaea448e80886ba34ddad4d70bcdf30
-
SHA256
db947ee309d5e7ccc87241d97c7771487ee2a71987714fe4c3abd873b5d93a11
-
SHA512
710849730c33fe0ef830e172799571d5ee044418bb7f4fa13c2322bebde2292a9968e8d90069e7b44c5c4fd60e7306ad18914c935d5c15e1f679f99fa8526389
-
SSDEEP
1536:wzUIb25A8ULN005o09WDuYHGjUAsOerKYTjipvF2z3ErLUmb:mUIbf5xquYmSOerKYvQd2w
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db947ee309d5e7ccc87241d97c7771487ee2a71987714fe4c3abd873b5d93a11N
Files
-
db947ee309d5e7ccc87241d97c7771487ee2a71987714fe4c3abd873b5d93a11N.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE