Behavioral task
behavioral1
Sample
5f1d514d2741b7151c2bb8a1bdaa9d60N.exe
Resource
win7-20240704-en
General
-
Target
5f1d514d2741b7151c2bb8a1bdaa9d60N.exe
-
Size
487KB
-
MD5
5f1d514d2741b7151c2bb8a1bdaa9d60
-
SHA1
40539be0bf33a6b3c365d4c8fe0bf5fbdf617646
-
SHA256
814c18630757d92b952bf338e2243545652b729c653d79c5a4e9fd2471303ee0
-
SHA512
2ce4f7e171b578500a5bddcea286a7ad95988e3415a1a0a2aa8c14441079dd2f145c03c5147965ee90dddb95d0726e615c1070b58a09b85a6f698e223e642729
-
SSDEEP
6144:xcm4FmowdHoSkhraHcpOFltH4t+IDvSXrh5g8hZTydOAkOCOu0EajNVBZr6y2WX2:74wFHoSceFp3IDvSbh5nP+ais
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f1d514d2741b7151c2bb8a1bdaa9d60N.exe
Files
-
5f1d514d2741b7151c2bb8a1bdaa9d60N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ