Behavioral task
behavioral1
Sample
94fc6f8841d607dec73a4700a9080930N.exe
Resource
win7-20240708-en
General
-
Target
94fc6f8841d607dec73a4700a9080930N.exe
-
Size
84KB
-
MD5
94fc6f8841d607dec73a4700a9080930
-
SHA1
965cbadc95afc3bd3201626a9532209ff1216f28
-
SHA256
5d57ce5ebca72fc2136ec68a1e41a7aeb3c36215dedfba37644d84500451bcbe
-
SHA512
d54dfaa895ffb98bfe3c76aeaca1de601abac0454bb4cc43a4196e442a0a95276dc083c3f5590ce37e25123a3c680477b177fdb80f19ad51f0950d6748d6a7b6
-
SSDEEP
768:/pQNwC3BESe4Vqth+0V5vKmyLylze70wi3BEmL:BeT7BVwxfvEFwjRL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 94fc6f8841d607dec73a4700a9080930N.exe
Files
-
94fc6f8841d607dec73a4700a9080930N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 41KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE