Behavioral task
behavioral1
Sample
218a3ff884de6795cf7e71f20d4f8196b608d54f9a19da75feb1e6cdc785bc85.exe
Resource
win7-20241010-en
General
-
Target
218a3ff884de6795cf7e71f20d4f8196b608d54f9a19da75feb1e6cdc785bc85
-
Size
366KB
-
MD5
b81334e41ec389d4fd83a57230ea629d
-
SHA1
d1f1aa215ce10fd9256bdb8c40520d1c06029000
-
SHA256
218a3ff884de6795cf7e71f20d4f8196b608d54f9a19da75feb1e6cdc785bc85
-
SHA512
0c30f5acab1e77cedd208ed2c2293ab9ac780290870bcae0b1c0f6a5e7ec9c319f33dbdc48fe14ad479b479f315ec4b02f9ac41c8227ff690777c34388c16111
-
SSDEEP
6144:9cm4FmowdHoSdSyEAxyx/ZrTTr4qIMgE8T:/4wFHoSQuxy3rTXIM18T
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 218a3ff884de6795cf7e71f20d4f8196b608d54f9a19da75feb1e6cdc785bc85
Files
-
218a3ff884de6795cf7e71f20d4f8196b608d54f9a19da75feb1e6cdc785bc85.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE