Behavioral task
behavioral1
Sample
5c149e0f30ef8dcd693c470e9f4736d0N.exe
Resource
win7-20240705-en
General
-
Target
5c149e0f30ef8dcd693c470e9f4736d0N.exe
-
Size
98KB
-
MD5
5c149e0f30ef8dcd693c470e9f4736d0
-
SHA1
bf07a2ca658d36dfd5a999f9e27997c59a67091a
-
SHA256
b3b66074eb38322c9fc029dce382422b2fa357e4bd49c66c9f36e581a3a29d60
-
SHA512
94579d9857c41cd1e6c9cf1a0b452f5a7011d1b71241bacf8b4cec3f67ebe60f64f23c3d1bb5122cf5d436954b978141c083e35980768c43b48bf2dd36c1259d
-
SSDEEP
3072:khOmTsF93UYfwC6GIoutpYcvrqrE6T9oFLNpo:kcm4FmowdHoSphra3mLI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c149e0f30ef8dcd693c470e9f4736d0N.exe
Files
-
5c149e0f30ef8dcd693c470e9f4736d0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE