Behavioral task
behavioral1
Sample
4a82826ce5b64ed5de8b0b6c809070e0N.exe
Resource
win7-20240705-en
General
-
Target
4a82826ce5b64ed5de8b0b6c809070e0N.exe
-
Size
138KB
-
MD5
4a82826ce5b64ed5de8b0b6c809070e0
-
SHA1
d8d6202a819498d05acb04c7fc6d9d8ed92e1e56
-
SHA256
3b75760f81dadce896b616da1519b33e8c6e185e7392cec59929a2ef9039b923
-
SHA512
709e8f4b58a8d88aa86951cc1de14c27c0b8397bdb466391490cbcf6c2e3b67c2e69d76d1c479618f404f26ea8100042832a47defd2133e22dbf7b134c69ce75
-
SSDEEP
1536:V7Zf/FAxTWoJJ7TTQoQ6+I+0Y3hx+fsio5UxKzWZ64+A8D:fny1oR+VEio5Ua4NA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a82826ce5b64ed5de8b0b6c809070e0N.exe
Files
-
4a82826ce5b64ed5de8b0b6c809070e0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE