Behavioral task
behavioral1
Sample
0c125be171d3f2eb0e64828528349a40N.exe
Resource
win7-20240704-en
General
-
Target
0c125be171d3f2eb0e64828528349a40N.exe
-
Size
46KB
-
MD5
0c125be171d3f2eb0e64828528349a40
-
SHA1
5092694a3041ffca7de7a48a9bc1d21f1820a198
-
SHA256
96e44245d10e0ee7032d53d34c778634cf0bb6953ce25417ce6b919c1bef4548
-
SHA512
ac21a2fd2a671216cf96b5b80887c7b6aeb52f14a11fdc9ca849f7e841fff81c5e2ddf771e8aaf8afeff5e142977f0852ff4f044e452d284c167a57dd17b24b1
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjyJJBZBZaOAOIB3jM2jMg:V7Zf/FAxTWoJJB7LD2I2Ig
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c125be171d3f2eb0e64828528349a40N.exe
Files
-
0c125be171d3f2eb0e64828528349a40N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE