Behavioral task
behavioral1
Sample
c3e9289ba0afff61eca614215cdc5cd0N.exe
Resource
win7-20240704-en
General
-
Target
c3e9289ba0afff61eca614215cdc5cd0N.exe
-
Size
251KB
-
MD5
c3e9289ba0afff61eca614215cdc5cd0
-
SHA1
c19679f29a91345bdb6b64b998fe21355ea21752
-
SHA256
ba33d0af5690be2eee1065bcdfe8186878a1a5fab01c609f3c91aceb151d701e
-
SHA512
813f57167f14d73f84ecbf6793ae63d4db9e0150091d15c840ce9baeaba22c6a11c6e0744d567c6d32036df835f06bef6efcf032fb8b0669707890b389209ffe
-
SSDEEP
6144:kcm4FmowdHoSphraHcpOaKHpolTjZXvEQo9dfBP/D:y4wFHoS3eFaKHpKT9XvEhdfBP/D
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c3e9289ba0afff61eca614215cdc5cd0N.exe
Files
-
c3e9289ba0afff61eca614215cdc5cd0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE