Behavioral task
behavioral1
Sample
f8ea3a701894fd0fec7348f7a624afb88357ebfbde2a934457f47e519fea9412.exe
Resource
win7-20240708-en
General
-
Target
f8ea3a701894fd0fec7348f7a624afb88357ebfbde2a934457f47e519fea9412
-
Size
3.8MB
-
MD5
e01d4e6c53efd41707b9624182c5b577
-
SHA1
2a11412bbafffc703f7521ac37f4c86991bbe5a7
-
SHA256
f8ea3a701894fd0fec7348f7a624afb88357ebfbde2a934457f47e519fea9412
-
SHA512
9fc4073fa79c4305ee5b33d1907d2c2503e8595a6dd35e49373f93801c6626673ace494b460a9157d8b945793a46680682424fa25632ca459f1d64d81cc024d2
-
SSDEEP
98304:OWqjpkL6NvGcwveoov66lXKY/y0+MLt0sdjvD0:Odpi6vGcweLlXKIv08Q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f8ea3a701894fd0fec7348f7a624afb88357ebfbde2a934457f47e519fea9412
Files
-
f8ea3a701894fd0fec7348f7a624afb88357ebfbde2a934457f47e519fea9412.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3.7MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 95KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE