Behavioral task
behavioral1
Sample
26d8ca288473bef6613f378b4f348900N.exe
Resource
win7-20240708-en
General
-
Target
26d8ca288473bef6613f378b4f348900N.exe
-
Size
447KB
-
MD5
26d8ca288473bef6613f378b4f348900
-
SHA1
030f49cf0e5beccf825aba6274afb703d8e42a51
-
SHA256
3170d4a3877b58db4256fe0da2e44afc93af4a2b2b660d6ff004e5e5fe9291ff
-
SHA512
29508bd95eddc80b9c1e8c987d9fdb0fb87697a3dd6f902989b66f1542e8e98e14f60e10f31aca155aa0adccd5e183d79f635492d0295ae6417dd35e81244c05
-
SSDEEP
768:CpQNwC3BESe4Vqth+0V5vKPyLylze70wi3BEm3:CeT7BVwxfvLFwjR3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26d8ca288473bef6613f378b4f348900N.exe
Files
-
26d8ca288473bef6613f378b4f348900N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pb Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE