Behavioral task
behavioral1
Sample
5ccd3efc9086202bc17434c6a838ee85f2f643976c8adf281107d141eef61f26.exe
Resource
win7-20240708-en
General
-
Target
5ccd3efc9086202bc17434c6a838ee85f2f643976c8adf281107d141eef61f26
-
Size
132KB
-
MD5
24e3775541c38217cf21040d734e056f
-
SHA1
aacf472b55afac4cd8bf1f8ab5b7fdefc7e06134
-
SHA256
5ccd3efc9086202bc17434c6a838ee85f2f643976c8adf281107d141eef61f26
-
SHA512
f3bc393f8639c4cd693ce5da30d3ca5077cbc4810f09d9cfb9b02a646ef3900171f4caad2da7ae1e45a918c622153e38f14c40a41a58fe9f4d87cbff88fdd503
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcI9Ygll62XgiJehh1hCghdO:V7Zf/FAxTWoJJ7TVljFEwOxW3o/v7V+f
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ccd3efc9086202bc17434c6a838ee85f2f643976c8adf281107d141eef61f26
Files
-
5ccd3efc9086202bc17434c6a838ee85f2f643976c8adf281107d141eef61f26.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE