Behavioral task
behavioral1
Sample
63255b8bb20f60a1b5ffb8ed5784b350N.exe
Resource
win7-20240708-en
General
-
Target
63255b8bb20f60a1b5ffb8ed5784b350N.exe
-
Size
36KB
-
MD5
63255b8bb20f60a1b5ffb8ed5784b350
-
SHA1
7210925592da657c9bbe47fb81063cd1b04e0a41
-
SHA256
12e355b44210280cf554be2b81ab182f2c4cc99faf70facb5fa3956c1c83df62
-
SHA512
8d12c8bbff4535f3bd13330850ff5f38c1c97d556fb11309bb0fcbb5c2eec407132551418fc6900a0d79f5f76f32ce2eccd422e0f048caf1a4af68791906cbde
-
SSDEEP
384:wScaozzwEDkyM7R0zVUzwMdSSRAXzQeVO2pu:wJP4EhyMO8MdoQeVO2pu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63255b8bb20f60a1b5ffb8ed5784b350N.exe
Files
-
63255b8bb20f60a1b5ffb8ed5784b350N.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE