Behavioral task
behavioral1
Sample
f5c5c3c812bff79a2b9c4e2e13377140N.exe
Resource
win7-20240708-en
General
-
Target
f5c5c3c812bff79a2b9c4e2e13377140N.exe
-
Size
121KB
-
MD5
f5c5c3c812bff79a2b9c4e2e13377140
-
SHA1
d785cd74b2049cdc8dddcd58df27316b033d5728
-
SHA256
87e313e57e7d25b04502ff31b8193c44863caaa7dc6f455be2d57feb818d2120
-
SHA512
7ebc760b4d1e6fedb044542c7c496de50073330dd78627aa14a417887a1791420269231437486fe0f24a793fc4f70b8d183d86f22ef85db7e4c68aa2f47fb313
-
SSDEEP
1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8IZPHSXIBlE3hha08yZySzCeRSZ7M2:fnyiQSo7ZPHSXIBlf08qySzCeRS22
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5c5c3c812bff79a2b9c4e2e13377140N.exe
Files
-
f5c5c3c812bff79a2b9c4e2e13377140N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE