Behavioral task
behavioral1
Sample
2d56d56b7ba7f0f730624abb92b7d210N.exe
Resource
win7-20240705-en
General
-
Target
2d56d56b7ba7f0f730624abb92b7d210N.exe
-
Size
126KB
-
MD5
2d56d56b7ba7f0f730624abb92b7d210
-
SHA1
c2285663197068b77a6e56e028a055b0905fb02f
-
SHA256
8f5de4d225cb37929a8e32d67a369b8d706cd818dd2f2366903f175a297bffa6
-
SHA512
9fea2357424d46c76869c31f6b2ad8453fcfa6df828890ee72dfaf2be39b621b22471430907f9ff279f91be1c97674dc1c4c714283106a342e4159ab39299d8c
-
SSDEEP
1536:V7Zf/FAxTWKTmXadjUSbcDemTPAZk+cLtdNlb9PfESDOayxaJ0:fnyP6W2QZwKS7C
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d56d56b7ba7f0f730624abb92b7d210N.exe
Files
-
2d56d56b7ba7f0f730624abb92b7d210N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE