Behavioral task
behavioral1
Sample
5110ccf01fd6b0a7fbf202208946ec0f8d788e34eb93a2a72b59600bbdedb16d.exe
Resource
win7-20240729-en
General
-
Target
5110ccf01fd6b0a7fbf202208946ec0f8d788e34eb93a2a72b59600bbdedb16d.exe
-
Size
2.0MB
-
MD5
b6af4ba866a9a35ccd85544b25565a29
-
SHA1
26bd7d500780bf362f947091fa24c3387f399ab6
-
SHA256
5110ccf01fd6b0a7fbf202208946ec0f8d788e34eb93a2a72b59600bbdedb16d
-
SHA512
412f9b15c7f225b019f9359bfd0cf445a2f902ff406e34d55363604d99980b909e67c1d49f0ec38601d7060acab5de29b91dc8412927cf4da80ba2bd1be11de2
-
SSDEEP
49152:Gs29+ZP3+ewMxu6Vb6Vcg2wrsi0nT9TIlfasAFxh/KKlUm3ee+:GX+ZP3pwl6VGVX2wrsi0nT5IVa1xhC0+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5110ccf01fd6b0a7fbf202208946ec0f8d788e34eb93a2a72b59600bbdedb16d.exe
Files
-
5110ccf01fd6b0a7fbf202208946ec0f8d788e34eb93a2a72b59600bbdedb16d.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 4.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reltc Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE