Behavioral task
behavioral1
Sample
902d7f6fa89984b80f44d1d0c4192980N.exe
Resource
win7-20240708-en
General
-
Target
902d7f6fa89984b80f44d1d0c4192980N.exe
-
Size
347KB
-
MD5
902d7f6fa89984b80f44d1d0c4192980
-
SHA1
1fe0e67b8929d98080d912c5f37703242ae38ad3
-
SHA256
77a720bea8a82a3971ee25a38ce94f08a1787c5df1e0fab67da3cc4866acaab8
-
SHA512
4559e9e707d9ec224f68e0e8960f5ac0843bffe9c63ec86401c82acfaeb0b768c427bd62db9cd2b7a976d2e5ccac98e0e97f9f2e21701d9e659ee704765c2655
-
SSDEEP
3072:enaypQSo6VEio5Ua4NEnaypQSo6VEio5Ua4Nv:wHpQSo2Eio5UmHpQSo2Eio5Ur
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 902d7f6fa89984b80f44d1d0c4192980N.exe
Files
-
902d7f6fa89984b80f44d1d0c4192980N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE