Behavioral task
behavioral1
Sample
05fe5d6529dd4b99379d214faebf5a70N.exe
Resource
win7-20240729-en
General
-
Target
05fe5d6529dd4b99379d214faebf5a70N.exe
-
Size
125KB
-
MD5
05fe5d6529dd4b99379d214faebf5a70
-
SHA1
0e8460af63ebb863d632e289d98939ca182d3d83
-
SHA256
61df5ab93210191c190d0b9b68cc3a6ff30e9a0b7f46170908e9023781dc9eaa
-
SHA512
7ce444e227e46b37ce8cd74188c1b1dc5dad43b431b47e599642f1f41ffd52be4c1256c5b1c6976983d655d70144255481b5abbdcab101a6d453181ea8e99b91
-
SSDEEP
1536:V7Zf/FAxTWoJJ7TCEk8NhoYyRvaLNFqRprAqnMEosmE+w+dnw+dnEDhk+93ERy3D:fny1+FXw0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05fe5d6529dd4b99379d214faebf5a70N.exe
Files
-
05fe5d6529dd4b99379d214faebf5a70N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE