Behavioral task
behavioral1
Sample
967cd7288b95727da6a9e8b83d2ecd20N.exe
Resource
win7-20240704-en
General
-
Target
967cd7288b95727da6a9e8b83d2ecd20N.exe
-
Size
51KB
-
MD5
967cd7288b95727da6a9e8b83d2ecd20
-
SHA1
5ba0765fe4cf2b2d56e936b39dc61827437d65a2
-
SHA256
47dea67ffa2bc114862e48ed0d6136f1012410cd48a6ee361e7e89698c3f43c6
-
SHA512
de8ea6e0c59f7efb90d6b0c358df926c5e9f4dce4f2db61fb77dd37b482baa1508564ea16b72dfbab8e179c7af4cae0054178e44b160e80fdc33e3bf20102030
-
SSDEEP
768:n8eRH+MlFh0pXrL4i6sh7iQroCHmmbk2ElU/S:n9l+Gi6sh7iQroCLMV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 967cd7288b95727da6a9e8b83d2ecd20N.exe
Files
-
967cd7288b95727da6a9e8b83d2ecd20N.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 20KB - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE