Behavioral task
behavioral1
Sample
990baa0992d59a4e80f072d9b0940b60N.exe
Resource
win7-20240708-en
General
-
Target
990baa0992d59a4e80f072d9b0940b60N.exe
-
Size
120KB
-
MD5
990baa0992d59a4e80f072d9b0940b60
-
SHA1
4016971635c47a629d8adcfd9b5313b14552ea54
-
SHA256
d2736c3002498c2a19a49773829563ef210ba9acf61638001ea5bf4362c0d2d8
-
SHA512
5814874f6ff13638580e0120778e24531b5d56e696c3bc98fd946dc2818e0b42a3d10b4aa50b4435394c44e5e867ba2b7e0851d9b61453c6e5f1d1f6bc9691cf
-
SSDEEP
3072:9hOmTsF93UYfwC6GIoutz5yLpcgDE49IIoO:9cm4FmowdHoS0IIoO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 990baa0992d59a4e80f072d9b0940b60N.exe
Files
-
990baa0992d59a4e80f072d9b0940b60N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE