Behavioral task
behavioral1
Sample
91c58f503bcc3a1e2babbc5a71f02138c3bd723d25c1ede5e68409fc65a976c2.exe
Resource
win7-20241010-en
General
-
Target
91c58f503bcc3a1e2babbc5a71f02138c3bd723d25c1ede5e68409fc65a976c2
-
Size
110KB
-
MD5
6345f60f4f16e4deb5b6a1af71e03ee5
-
SHA1
b2110606a8271537595ecb9468155c01a8e458bc
-
SHA256
91c58f503bcc3a1e2babbc5a71f02138c3bd723d25c1ede5e68409fc65a976c2
-
SHA512
22735e1ae884ca0591aab71c81da34986e35cf05a586101c01c9d01c6b31a32a0d1fbe4e05c1cc44731ec68668b9417166e9b93a392da08fbc10bbb72a8f3fcd
-
SSDEEP
1536:biLOvRmmQegJfBbmAQ256/ZrwWnwqjhurmKFcxL8JQ2r0Eg:biyvRmDLs/ZrwWJjAqGcRJ2hg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 91c58f503bcc3a1e2babbc5a71f02138c3bd723d25c1ede5e68409fc65a976c2
Files
-
91c58f503bcc3a1e2babbc5a71f02138c3bd723d25c1ede5e68409fc65a976c2.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 61KB - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE