Behavioral task
behavioral1
Sample
624a067a2093937e2fe41f63aca86030N.exe
Resource
win7-20240708-en
General
-
Target
624a067a2093937e2fe41f63aca86030N.exe
-
Size
63KB
-
MD5
624a067a2093937e2fe41f63aca86030
-
SHA1
9dc19d5c63ff4081c5f9d09b363e846d4377a86c
-
SHA256
70458ab9243677d1649da90b2b795af66d6056ae678eae858968dfb46c156a5a
-
SHA512
dbcaa90fc5c21f454ad9ec77a1f768b7bab81a65ad7e224345db4df128da64cb86399589634d10acf1f785f48211456e161a7be399c81d35553a1a35ea2303bf
-
SSDEEP
768:a7BlpyqaFAK65eCv+cIA0fm7Nm0CAbLg++PJHJzIWD4dodQOiJhfodQOiJhaJbPS:a7ZyqaFAlsr1++PJHJXP5HP49Pc9C
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 624a067a2093937e2fe41f63aca86030N.exe
Files
-
624a067a2093937e2fe41f63aca86030N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE