Behavioral task
behavioral1
Sample
fab7619e272b8461c6e0817a767d666cc9bb9ab2bcb129a774d7a66cc4f651cbN.exe
Resource
win7-20240903-en
General
-
Target
fab7619e272b8461c6e0817a767d666cc9bb9ab2bcb129a774d7a66cc4f651cbN
-
Size
3.2MB
-
MD5
ba9e909b02a7edcd08d34099ab4d7860
-
SHA1
7965ced5d6ac128d631ae7aa0dbfed86eab933c2
-
SHA256
fab7619e272b8461c6e0817a767d666cc9bb9ab2bcb129a774d7a66cc4f651cb
-
SHA512
33367ccc3cf53c483fcb360f01bd8ae18eaaeca69540a89d01399bfecb58dae8a3906b6ad415c14675e79397bf3a588a8b49094113bcd46f269804d27f8e2637
-
SSDEEP
98304:Ow0Kalz8nW8y5maUocakcs9sypwJzOMdcakc+qV3UHoB+dlgcakcs9sypwJzOMd2:B0KXnh6maUodlsVpUHdl+m3UHMdlsVp9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fab7619e272b8461c6e0817a767d666cc9bb9ab2bcb129a774d7a66cc4f651cbN
Files
-
fab7619e272b8461c6e0817a767d666cc9bb9ab2bcb129a774d7a66cc4f651cbN.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE