Behavioral task
behavioral1
Sample
feb136ebc403a38eb21e035658dbad992557621509ee3d7fc0ba399d1f6556df.exe
Resource
win7-20240903-en
General
-
Target
feb136ebc403a38eb21e035658dbad992557621509ee3d7fc0ba399d1f6556df
-
Size
333KB
-
MD5
a4af0b16db027f3bf8fdaa886eb41f4f
-
SHA1
1394a4df374c88044c7fcd297e8b1341d90eec68
-
SHA256
feb136ebc403a38eb21e035658dbad992557621509ee3d7fc0ba399d1f6556df
-
SHA512
de18ab3836384fca5496836c2d49fd57353e79f5ee71ea2f87916fba1eb22e2f16bcf15fea628070dc77497d64077b238cc96d2c0d12c668b6e1dca762443234
-
SSDEEP
6144:Lcm4FmowdHoSHt251UriZFwfsDX2UznsaFVNJCMKAbeTX:R4wFHoSHYHUrAwfMp3CDj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource feb136ebc403a38eb21e035658dbad992557621509ee3d7fc0ba399d1f6556df
Files
-
feb136ebc403a38eb21e035658dbad992557621509ee3d7fc0ba399d1f6556df.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE