Behavioral task
behavioral1
Sample
1c5624b2142b39a0a5932d3cc444a460N.exe
Resource
win7-20240704-en
General
-
Target
1c5624b2142b39a0a5932d3cc444a460N.exe
-
Size
93KB
-
MD5
1c5624b2142b39a0a5932d3cc444a460
-
SHA1
c5370bee8824c2f54ac8f202e76945d7d9104c18
-
SHA256
99b6755b0f29d2665092b2350afbb43f5418043d7769515dc2807a2cb9c4d0a9
-
SHA512
46e7a84d6855a69d38644263766eb4e1ab49368b5bfde8f8e9071b7d0476029bf3815b19888f54e0a4730503df93cf48f0c5fd456e4a29c9c6b0a72c6889ed20
-
SSDEEP
1536:xvQBeOGtrYS3srx93UBWfwC6Ggnouy82F13w801j35b4N4AO3Gkm:xhOmTsF93UYfwC6GIout03g35bCIW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c5624b2142b39a0a5932d3cc444a460N.exe
Files
-
1c5624b2142b39a0a5932d3cc444a460N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE