Behavioral task
behavioral1
Sample
29b7407a7e585e132c788b4bc0eb02b0N.exe
Resource
win7-20240704-en
General
-
Target
29b7407a7e585e132c788b4bc0eb02b0N.exe
-
Size
784KB
-
MD5
29b7407a7e585e132c788b4bc0eb02b0
-
SHA1
0ace27619b7638bad9cf10e3824f331cdd03d730
-
SHA256
f061f91c1c7589344c8107b3d8b392dcfded5ae1a5961d650d193ac93e80e0c7
-
SHA512
bc24f3a5bb184a3587d5adf78386bb882eef2f0a73152ce9a63fb9bdf9aa9161ee60c86d34816bee29763d5000c368cf628ae0871beeef8260bcbc88146669a6
-
SSDEEP
24576:C7imzs2N4RBRfYfqKtfcn48dGOKDF/zPIoo:C7imA2NQAfqcfchdQBz7o
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29b7407a7e585e132c788b4bc0eb02b0N.exe
Files
-
29b7407a7e585e132c788b4bc0eb02b0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE