Behavioral task
behavioral1
Sample
0fb0d7de70398a8b342bf615a24c9ff0N.exe
Resource
win7-20240704-en
General
-
Target
0fb0d7de70398a8b342bf615a24c9ff0N.exe
-
Size
246KB
-
MD5
0fb0d7de70398a8b342bf615a24c9ff0
-
SHA1
d44b3f627a399ecbc3f4c0e8f5fa8c861b2a5593
-
SHA256
335961eb8e22f862e4f6aee53cd67391379aa93ca152991682a3081a3fe74a9b
-
SHA512
400c0b6b731787dc6b4115c2984431beea5e2aa53c623e0d9f57e371f7712dabcfa4bbbf2539f312ea305d005424a8376bb1c913cd90e1c3d98952f709fe332c
-
SSDEEP
1536:a7ZyqaFAxTWH1++PJHJXA/OsIZfzc3/Q8zx3Y3hx+fsio5UxKzWZ64+A8C4bwvTA:enaypQSo6VEio5Ua4Nj6W2QZwKS7x
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fb0d7de70398a8b342bf615a24c9ff0N.exe
Files
-
0fb0d7de70398a8b342bf615a24c9ff0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE