Behavioral task
behavioral1
Sample
2925bd9ea1162bbbadd33c01c00a16e0N.exe
Resource
win7-20240708-en
General
-
Target
2925bd9ea1162bbbadd33c01c00a16e0N.exe
-
Size
66KB
-
MD5
2925bd9ea1162bbbadd33c01c00a16e0
-
SHA1
575cfcaf0e39f88922c5ebc9714b30c0607059d0
-
SHA256
262a1c6d0ddc6fd49c0523a7032b77162f259d0f651fc1a0b3fe1cbae5d7e716
-
SHA512
90f381bfefd5b65705aebaa4dee0c628e0a91d6a053c614f3f18de9c102bdc84a304cdb57d5a67b78c0421a6d51759d37c52a4ef21fd8c14f8d29efc303b9d5b
-
SSDEEP
1536:kvQBeOGtrYS3srx93UBWfwC6Ggnouy8p5yAXNYWkeu3zLoCP:khOmTsF93UYfwC6GIoutpYKkeu3gO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2925bd9ea1162bbbadd33c01c00a16e0N.exe
Files
-
2925bd9ea1162bbbadd33c01c00a16e0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE