Behavioral task
behavioral1
Sample
be5a855171aa83b61abbffa3f94ae45a794be0ff5c38b9b8630c827bc4d9c8aa.exe
Resource
win7-20240729-en
General
-
Target
be5a855171aa83b61abbffa3f94ae45a794be0ff5c38b9b8630c827bc4d9c8aa
-
Size
412KB
-
MD5
849a4386d3ab4b9b7e99788534dfe178
-
SHA1
21e1f30f612327444527105675028073913fafc9
-
SHA256
be5a855171aa83b61abbffa3f94ae45a794be0ff5c38b9b8630c827bc4d9c8aa
-
SHA512
42676f454fcad22a21051106817ab7df1b15c017a4ef021f205c7018a21df4d39b4b0a0fcad70d7b0df77745e3ad995689058200942da9110b931383873ca0f9
-
SSDEEP
6144:kgEcvV4Fustn8KnUI8/wkkexkEphM2jve/awxX7Py:/BV4Fust04kk3EphMOvei6XTy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource be5a855171aa83b61abbffa3f94ae45a794be0ff5c38b9b8630c827bc4d9c8aa
Files
-
be5a855171aa83b61abbffa3f94ae45a794be0ff5c38b9b8630c827bc4d9c8aa.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 328KB - Virtual size: 328KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ap0x Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE