Behavioral task
behavioral1
Sample
tx_1743020207149.exe
Resource
win10ltsc2021-20250314-en
General
-
Target
tx_1743020207149.exe
-
Size
3.1MB
-
MD5
f01179a4c7dd4d8f7d2cccce3025267c
-
SHA1
6f23d8676801aa1e3c192318163ffdf5087d503a
-
SHA256
b7597e2e5b19ce1d48f5e615d996523e32bc3ac069e2472305d52d667f7291f1
-
SHA512
56faf1cdbaf861c85963f32e0adfcd6e66d4fc000abb1622f1f0f6065955a7b28efc30081ee3b7c7cdf9c91fba78795f60ae997688bcd5bb25d1f51a527f035d
-
SSDEEP
49152:pP28sD83LJOqGB5YUpIoIPiPoCWW+OUH1+GHe8S3ldXRtkFonsUV/0O+ad2VRRvk:puv0chLXG5d+nRgMb1kjS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource tx_1743020207149.exe
Files
-
tx_1743020207149.exe.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 8.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE