Behavioral task
behavioral1
Sample
c36704367172831a52252d1511537a10N.exe
Resource
win7-20240708-en
General
-
Target
c36704367172831a52252d1511537a10N.exe
-
Size
156KB
-
MD5
c36704367172831a52252d1511537a10
-
SHA1
1f3c13c7378c378c12c24e337b0a38024c19487f
-
SHA256
522e4cc9f5526a80dfefbbeebc4a993558d113d6f5786b461d4f5a612de59ac8
-
SHA512
dd0404fd51b83bdadb1c995b1bdec02ceb6a4042505631f1a7b6234c635ab8f1bbb3e364e759b594607be285824d7b0478d3338733acd172050b360ff9f8bb1f
-
SSDEEP
3072:LCPjecmaxiViUp80s+sfHUzO0MBV6/Yh:2pIubnsOnH6wh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c36704367172831a52252d1511537a10N.exe
Files
-
c36704367172831a52252d1511537a10N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 63KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE