Behavioral task
behavioral1
Sample
a77a1b832e32563c867c2ee191682620N.exe
Resource
win7-20240705-en
General
-
Target
a77a1b832e32563c867c2ee191682620N.exe
-
Size
235KB
-
MD5
a77a1b832e32563c867c2ee191682620
-
SHA1
6e410ab8590009e83f8499c63de45ae4320752ac
-
SHA256
606d15dcfa5fb1ab8113b01cdab38811c0be743832fbee269838649bba9ba59e
-
SHA512
0f67193b481f1fce56879d9163900f7ea96b219aacd2d05e90a19ac2d71c4faaa89e776979fbf3ccb48cb40a5af32ba82fe1b3c8c3d9b949d3e5f0482dffd639
-
SSDEEP
3072:fnyiQSo7Z54HZKMx4dhECVjEdfg3jcKj2od0MvCPXtjR:KiQSoz4HUK4dh50fg3jcKji
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a77a1b832e32563c867c2ee191682620N.exe
Files
-
a77a1b832e32563c867c2ee191682620N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE