Behavioral task
behavioral1
Sample
5a5de5c0c2582e9f004059a538a08cf0N.exe
Resource
win7-20240704-en
General
-
Target
5a5de5c0c2582e9f004059a538a08cf0N.exe
-
Size
260KB
-
MD5
5a5de5c0c2582e9f004059a538a08cf0
-
SHA1
6cc9e9c91944e56dab4f02dbfc1d704d8d52b6f3
-
SHA256
11ca4e40d921e6aa03af1c6bbc9342275212406ac5d1542b9785a1c1ec9174e6
-
SHA512
bd03fbc00a2356c55e0f4932ec7a39a2ae5fdaee2e604797fed097ba64103e3c5ab22878f49c073c8bd25f773a6c2b010a7a71ca200ac39ed26d340c3477e525
-
SSDEEP
6144:kcm4FmowdHoSphraH+W0+9JGW594s2jULIDNc71ran:y4wFHoS3eeWR9JGW594tjU6wgn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a5de5c0c2582e9f004059a538a08cf0N.exe
Files
-
5a5de5c0c2582e9f004059a538a08cf0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE