Behavioral task
behavioral1
Sample
0c1738c8e87d403096c5137a67fb66bc6bbf19d5dbaf18028b3b5ab8dd6cdb20.exe
Resource
win7-20241010-en
General
-
Target
0c1738c8e87d403096c5137a67fb66bc6bbf19d5dbaf18028b3b5ab8dd6cdb20.exe
-
Size
146KB
-
MD5
7253a5dfc99934f965bb0aef560c9f2a
-
SHA1
0146b5fff483768f653e1171444b11dccdb58640
-
SHA256
0c1738c8e87d403096c5137a67fb66bc6bbf19d5dbaf18028b3b5ab8dd6cdb20
-
SHA512
be5eee4d1351fa77981df1019a01cb19301c11418470c151bc7f7ed1c1dbe32f7974bfe66eba79065c806a8ac35226e2c4e1745de7e1f722813673fc6ce57b8f
-
SSDEEP
1536:miLOvRmmQegJ3BbmAQ256/ZrwWnL8SOV7CW2YqjhOrmK6o8v0EL:miyvRmbLs/ZrwWL/OV7GjQqpo8lL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c1738c8e87d403096c5137a67fb66bc6bbf19d5dbaf18028b3b5ab8dd6cdb20.exe
Files
-
0c1738c8e87d403096c5137a67fb66bc6bbf19d5dbaf18028b3b5ab8dd6cdb20.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 75KB - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE