Behavioral task
behavioral1
Sample
b64e7ca53a539e426fb89bb3edf97630N.exe
Resource
win7-20240705-en
General
-
Target
b64e7ca53a539e426fb89bb3edf97630N.exe
-
Size
90KB
-
MD5
b64e7ca53a539e426fb89bb3edf97630
-
SHA1
5826e0477e1256d270141f8a7ba344b332fa3a35
-
SHA256
564dbcd88ef59b9d6d786b54f8d526434124843a5d2c2a3066571ee7e4c64af1
-
SHA512
7d874aee56e0599736ca8f52001527ff8901c991e41447f6cf37858e1d89d4df104acc4d89e171110941b73bbd5ddc43b859ec44327a0338e84afb2967609615
-
SSDEEP
1536:iU9YkETRm/Ch7igcuGC58kSxrOYFa1vnbazrf5:XzwR4q78uGC58kyrH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b64e7ca53a539e426fb89bb3edf97630N.exe
Files
-
b64e7ca53a539e426fb89bb3edf97630N.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE