Behavioral task
behavioral1
Sample
188398b53f136bdadc575d15f8028b4af9040c5bedc83d29189ef3ece4427d2eN.exe
Resource
win7-20240903-en
General
-
Target
188398b53f136bdadc575d15f8028b4af9040c5bedc83d29189ef3ece4427d2eN
-
Size
1.6MB
-
MD5
8b1e14cfc15746201145584f76c682d0
-
SHA1
d64dcb3885a2756c688dfe99ef183c905741cf83
-
SHA256
188398b53f136bdadc575d15f8028b4af9040c5bedc83d29189ef3ece4427d2e
-
SHA512
ab75973a98af5e6040e315a74a29840d9326cdbd8e6ba36d7f855a5b97f9492d27c77e4234ef6572070c84227830bd196e74beb488dd28b69def50ef905e4c0a
-
SSDEEP
49152:pzoDvB2MtTCFcakLz0NGkwjdgjtncakLz0O:pzuvB2MtuFcakcNGkwhgjtncakcO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 188398b53f136bdadc575d15f8028b4af9040c5bedc83d29189ef3ece4427d2eN
Files
-
188398b53f136bdadc575d15f8028b4af9040c5bedc83d29189ef3ece4427d2eN.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE