Behavioral task
behavioral1
Sample
671df3dea7fbfc97da4421233b70a200N.exe
Resource
win7-20240729-en
General
-
Target
671df3dea7fbfc97da4421233b70a200N.exe
-
Size
318KB
-
MD5
671df3dea7fbfc97da4421233b70a200
-
SHA1
11a3d5253b262fe6b7c299dfc4cb165116cc216d
-
SHA256
ed22bc8034666677b3464f14043dcf723c681f3b4822570badcfc862f5b966a4
-
SHA512
319e5c06e648a9c218a4824439f6d593e41eed4e20aa7ee0d4140d327939405b2b25a89356fbb74fe7cb2f8528c00bf4d25ed452cc1bea596efdfd2dc27ab6b2
-
SSDEEP
6144:9cm4FmowdHoS4BftapTs8Hoo+6MjTVhRDer:/4wFHoS4d0G8HoljTVhRDer
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 671df3dea7fbfc97da4421233b70a200N.exe
Files
-
671df3dea7fbfc97da4421233b70a200N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE