Behavioral task
behavioral1
Sample
a478af4244f778864bca4e8867a62d40N.exe
Resource
win7-20240729-en
General
-
Target
a478af4244f778864bca4e8867a62d40N.exe
-
Size
151KB
-
MD5
a478af4244f778864bca4e8867a62d40
-
SHA1
0c9d60054d5fde67ff821928f3030f0f4ec001ae
-
SHA256
7a19c5128de042d5fecbe959f724563bbf7524dd9f376bda281c0bc014f9e492
-
SHA512
21de80d0ebe5993b797324f6f7c65c603feae34db8b7a1b0ef9a4e2323be1743e6efcb80d70a2aba1438083673f4aaedc886fda027455e287b0dec2947eca127
-
SSDEEP
3072:9hOmTsF93UYfwC6GIoutz5yLpcka62c+CQV/n+0WvxSu9cMj0E:9cm4FmowdHoSZ6l8d9SxSu99YE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a478af4244f778864bca4e8867a62d40N.exe
Files
-
a478af4244f778864bca4e8867a62d40N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE