Behavioral task
behavioral1
Sample
38b5c260373f41296153c5920026a2c62c163d9b3a21c4a6391b475190f6c6aa.exe
Resource
win7-20241010-en
General
-
Target
38b5c260373f41296153c5920026a2c62c163d9b3a21c4a6391b475190f6c6aa
-
Size
206KB
-
MD5
5d9e8d844573bafab3caa7e6444f6b1a
-
SHA1
7363fe6b69a76b4bbf1e9d1e76b90f34a5832709
-
SHA256
38b5c260373f41296153c5920026a2c62c163d9b3a21c4a6391b475190f6c6aa
-
SHA512
efaad21abf825008a392947ad0aac98ddf5025a9ec84402ca76ba94f9e185aae20a5de0bb8694d66c8794734ca83134ee797595baf34cace6299807be2e4ed2a
-
SSDEEP
6144:8XjvIuxjs7bBCR1FHEiw/OGxDsAoGT+GklBWmryg+b:ujvI4xXFH1GxDK6+GkTWmrygK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38b5c260373f41296153c5920026a2c62c163d9b3a21c4a6391b475190f6c6aa
Files
-
38b5c260373f41296153c5920026a2c62c163d9b3a21c4a6391b475190f6c6aa.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 194KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE