Behavioral task
behavioral1
Sample
505f51c7cdf02519d4ab3a8dafda4c30N.exe
Resource
win7-20240708-en
General
-
Target
505f51c7cdf02519d4ab3a8dafda4c30N.exe
-
Size
3.2MB
-
MD5
505f51c7cdf02519d4ab3a8dafda4c30
-
SHA1
624aec6cc51a337080ea3e31e2b5bcd35d235b55
-
SHA256
5f75ff503e48ba79aa828e9724ff18fe9f3aba23f2af946770bd0b5109792bb9
-
SHA512
0dd451caea8602027d934efd0ad2bf4d2fe42c4338eb7ba730d5ceb2aa8229d46141888419db8291e3c09e82dd40c9c03ff29ff5018c93c103d6364be5454ce6
-
SSDEEP
98304:hlFMUQBNcakcgcceBa1BFtYHTcakcYKxboVB3E7kcakcgcceBa1BFtYHTcakcO:aUQBNdlgccUaFGTdlYqoL3akdlgccUaN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 505f51c7cdf02519d4ab3a8dafda4c30N.exe
Files
-
505f51c7cdf02519d4ab3a8dafda4c30N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE