Behavioral task
behavioral1
Sample
169c32b41499b03cefffdada7d0079f0N.exe
Resource
win7-20240704-en
General
-
Target
169c32b41499b03cefffdada7d0079f0N.exe
-
Size
117KB
-
MD5
169c32b41499b03cefffdada7d0079f0
-
SHA1
64a37e32668ae17b4352adf506b7fff8415378b5
-
SHA256
eaa3de6e14e180cc20d252e0fee1f3d54309b48466dc4351ec231f199dae7bb6
-
SHA512
a72f59caca9e398d0c5d64991cede363b69dc33f709f11696de663ffc27a3fc9e7bb87c242fb64be59c0f64622254e1e61ec55beaa36ddb90e4b344203a628ad
-
SSDEEP
1536:V7Zf/FAxTWoJJXjTW7JJX1g+g4Pczv61XxvEci9vQG9xmX/D53HbGyH5cNvS9fv3:fny1bMbCh39EHbz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 169c32b41499b03cefffdada7d0079f0N.exe
Files
-
169c32b41499b03cefffdada7d0079f0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE