Behavioral task
behavioral1
Sample
29fea18e552f60110d51ad7457a7c496b925ae5383179bf25e84e16da4482fe9.exe
Resource
win7-20240704-en
General
-
Target
29fea18e552f60110d51ad7457a7c496b925ae5383179bf25e84e16da4482fe9
-
Size
84KB
-
MD5
707864fedb15ac2954dfa9d62a7b1281
-
SHA1
0b9f37bdd82fe4ef94e15b86d3b48158e45d93dd
-
SHA256
29fea18e552f60110d51ad7457a7c496b925ae5383179bf25e84e16da4482fe9
-
SHA512
1ce67ca65285f9134b5b2a80ae8f4671df2f7f08ea680658564b530ca7e27568af788b9204bca81e5e67076a1d282e0318e5713bb474c99218b8c761b7ceca48
-
SSDEEP
768:/pQNwC3BESe4Vqth+0V5vKmyLylze70wi3BEm0:BeT7BVwxfvEFwjR0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29fea18e552f60110d51ad7457a7c496b925ae5383179bf25e84e16da4482fe9
Files
-
29fea18e552f60110d51ad7457a7c496b925ae5383179bf25e84e16da4482fe9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 41KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE