Behavioral task
behavioral1
Sample
229f2f42ec38ece98fda079be1aa727f5f0ef9c77217b2ca7d49df65204b8192N.exe
Resource
win7-20240903-en
General
-
Target
229f2f42ec38ece98fda079be1aa727f5f0ef9c77217b2ca7d49df65204b8192N
-
Size
2.1MB
-
MD5
fb26edffe3676bafaea5186dc1ef0510
-
SHA1
54e9a307e9f8d99a3a3ef251212489f5fe45da4a
-
SHA256
229f2f42ec38ece98fda079be1aa727f5f0ef9c77217b2ca7d49df65204b8192
-
SHA512
62de84cfebb8595cc026af03d41e1760c95408ccc7f9fee1fe93d33e1ce1f567f083297e36ea9e75584de588a673be89c0a8617907f39f17bd9e09346d079b56
-
SSDEEP
49152:Gp8nE6/6sHJENJoBj7WxGlK36cP95qC7vjf7nw:Xn9wJoBj7qAKQIvjfjw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 229f2f42ec38ece98fda079be1aa727f5f0ef9c77217b2ca7d49df65204b8192N
Files
-
229f2f42ec38ece98fda079be1aa727f5f0ef9c77217b2ca7d49df65204b8192N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 524KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 278KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE