Behavioral task
behavioral1
Sample
65d9468e4e017c92173f772d4bc8ab30N.exe
Resource
win7-20240704-en
General
-
Target
65d9468e4e017c92173f772d4bc8ab30N.exe
-
Size
132KB
-
MD5
65d9468e4e017c92173f772d4bc8ab30
-
SHA1
88063ee75c956deb6d5c7feb52ebef1c11185efe
-
SHA256
8e2a659f14142bf79141a0d435977ff1237cff6c1999af00f338d446073dee0a
-
SHA512
fa6a843a557c4c1b8cd2148df17c30dcea4d208cd12a336610907e894ff7178c10cedf039aabf515cf104f9e66ba72f58606e7ce32b5e83d805c2c92d306bdf6
-
SSDEEP
1536:V7Zf/FAxTWoJJZENTNyl2Sm0mEhTSjaYavUgJt8ynjorj9SvzpNzCbq9a1DB:fny1tE42mhRPvUgHz7zi
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65d9468e4e017c92173f772d4bc8ab30N.exe
Files
-
65d9468e4e017c92173f772d4bc8ab30N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE