Behavioral task
behavioral1
Sample
5b2ae632c7f66b4cbb08cc45857bf850N.exe
Resource
win7-20240705-en
General
-
Target
5b2ae632c7f66b4cbb08cc45857bf850N.exe
-
Size
123KB
-
MD5
5b2ae632c7f66b4cbb08cc45857bf850
-
SHA1
d693b5ed18c5c895a4fcc55035049cd9cb37408e
-
SHA256
178e8ce5bd30f6dea91def78cc6f8ac60aeecaed7e831446a2dbf7ea8c8cb241
-
SHA512
381d61929eca5a7c848b6b6d37f4cea11b0ec940f172ab27c687cc78365c70051e1630a6155615727e16a5479af3f0cfa11842bd317f4f5490f3453d81c5ceda
-
SSDEEP
3072:WdNoeE6Qju0po/ldIc4pRoKVSTW/aq89wR8Kja/hJM:aNohCzj444STW69pJJM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b2ae632c7f66b4cbb08cc45857bf850N.exe
Files
-
5b2ae632c7f66b4cbb08cc45857bf850N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 368KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 122KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE