Behavioral task
behavioral1
Sample
1e71ddc02044e6e970e3b20825f87910N.exe
Resource
win7-20240729-en
General
-
Target
1e71ddc02044e6e970e3b20825f87910N.exe
-
Size
43KB
-
MD5
1e71ddc02044e6e970e3b20825f87910
-
SHA1
0d0634e574e46f7e675e93d4fce74d8d3ad3993d
-
SHA256
6db8caeb249235606484b62620a1eb725931df940b5c389e7e553ad059f02684
-
SHA512
f6febb7845a3a106d08cdb435a814c26a9de6eef65a48a0d2916fa0c860223436047d51362e533b1f1641a13795883ae5206c5c4b54b9e36e61e74c1c92ad83e
-
SSDEEP
768:l7HBXFw82t2C80lyaZ44RgnAmlcEM+JaBB2w/afjuVQM:l7HZFwzlyaZzml3M+OBdRSM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1e71ddc02044e6e970e3b20825f87910N.exe
Files
-
1e71ddc02044e6e970e3b20825f87910N.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE