Behavioral task
behavioral1
Sample
81ef87a0dcd3f638b8ff9ece81c00570N.exe
Resource
win7-20240704-en
General
-
Target
81ef87a0dcd3f638b8ff9ece81c00570N.exe
-
Size
145KB
-
MD5
81ef87a0dcd3f638b8ff9ece81c00570
-
SHA1
069739280725745c8aa138fa0e44d1023fd1ad12
-
SHA256
453e8dbf53608c8bed3e866061d9d747b36c87fed3f99f5210f4dfa978c350e1
-
SHA512
fc50fa07faae6a6ded4812b35a40f552e27620222516d5079fcfd3abde4ddcc02f400d60beaf858641d27f97772b5acbddea37c9205004805d1e0386ddf5f7d5
-
SSDEEP
1536:V7Zf/FAxTWoJJ7TlTW7JJ7TwTmXadjUSbcDemTPAZk+cLtdNlb9PfESDOayxaJh:fny1yE6W2QZwKS7P
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 81ef87a0dcd3f638b8ff9ece81c00570N.exe
Files
-
81ef87a0dcd3f638b8ff9ece81c00570N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE