Behavioral task
behavioral1
Sample
5b486c423671ed4fccb9d2affad1e330N.exe
Resource
win7-20240729-en
General
-
Target
5b486c423671ed4fccb9d2affad1e330N.exe
-
Size
68KB
-
MD5
5b486c423671ed4fccb9d2affad1e330
-
SHA1
4e65ca73a55a790ec6fc1d321b94cc6fe8a00634
-
SHA256
4944c85ed9f03e63bae340353168887e222506c9d771d4c452d7ddeaa27347bc
-
SHA512
f1f0bafb6e9cfccdd6fb83f178707da2a4980420df9850295e98b413a78db5536f0f3ea9f314c682d3b25b09be61edf8c2e42af4b2986f7a9b0f971b45039a75
-
SSDEEP
1536:/vQBeOGtrYS3srx93UBWfwC6Ggnouy8jb5DnuyC8:/hOmTsF93UYfwC6GIoutoT8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b486c423671ed4fccb9d2affad1e330N.exe
Files
-
5b486c423671ed4fccb9d2affad1e330N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
vryeypb Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE