Behavioral task
behavioral1
Sample
cf48f5945e1e808cea5349fdc24eacc0N.exe
Resource
win7-20240705-en
General
-
Target
cf48f5945e1e808cea5349fdc24eacc0N.exe
-
Size
709KB
-
MD5
cf48f5945e1e808cea5349fdc24eacc0
-
SHA1
aeb53778566d244b17d22598e866eba4c36304f9
-
SHA256
2c3e7a5a5d8ee2fbfb2e2608a040578a5d8ee86a19068dc84e994f24c6219e3c
-
SHA512
01ad7ba0c9ba9192c9674d0f4c94b15e54900c6cbf5f933b6552f328b241eb90559f9c0c1a3f0072f3557a43e306aca6ecef1f5cdaab2c283f9c283b30cdd699
-
SSDEEP
12288:VQtjQQsgu8+2fQEL0/E86mnaCymdZgQi+Q5YogoV+es:VIsxY+MsvymbI+8pT+/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf48f5945e1e808cea5349fdc24eacc0N.exe
Files
-
cf48f5945e1e808cea5349fdc24eacc0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE