Behavioral task
behavioral1
Sample
de79b129ccffbaf637ce7af93feba7c748d13997f997e1977b244ab04a075a76.exe
Resource
win7-20241010-en
General
-
Target
de79b129ccffbaf637ce7af93feba7c748d13997f997e1977b244ab04a075a76
-
Size
89KB
-
MD5
ac5a7993402082d01fd8b06e43930519
-
SHA1
88c4bdbfaedd4032da912caef6f3ea0035382518
-
SHA256
de79b129ccffbaf637ce7af93feba7c748d13997f997e1977b244ab04a075a76
-
SHA512
47c9bad8403672040f23e7919f24fe1fd1d39e1f90c59de28d01c773e23feb753100cfebdc58002ce8aef3d267c0ed2e23f4a545f2242bfb6664fb222c9df676
-
SSDEEP
1536:N1+mFM2HXKZgixhIksu+XM5/HtAQ9Jox7u:P+4MJIkLZJNAQ9Jo9u
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de79b129ccffbaf637ce7af93feba7c748d13997f997e1977b244ab04a075a76
Files
-
de79b129ccffbaf637ce7af93feba7c748d13997f997e1977b244ab04a075a76.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE