Behavioral task
behavioral1
Sample
0ac6cfd371dcc3cf45fb80e1ba55b4c0N.exe
Resource
win7-20240704-en
General
-
Target
0ac6cfd371dcc3cf45fb80e1ba55b4c0N.exe
-
Size
105KB
-
MD5
0ac6cfd371dcc3cf45fb80e1ba55b4c0
-
SHA1
94f6f7503ca786ea9623cb72b74039c3e24b04f8
-
SHA256
38e50dafc070d32d3bbe029680ee9cae8f47bb29d89282c663c66ea7608de2ec
-
SHA512
f45d11bc93d8874dbd6d1e1731af5d55811f7331abaafe3a7eeaa79a6742d3e974515778695ffdf3fc51494057817032b146d5e456e2e8501e120633b1ff6e85
-
SSDEEP
3072:chOmTsF93UYfwC6GIout5pi8rY9AABa11l:ccm4FmowdHoS5ddWcl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ac6cfd371dcc3cf45fb80e1ba55b4c0N.exe
Files
-
0ac6cfd371dcc3cf45fb80e1ba55b4c0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE