Behavioral task
behavioral1
Sample
442c7463d55acf27c59fe8fda5f07200N.exe
Resource
win7-20240708-en
General
-
Target
442c7463d55acf27c59fe8fda5f07200N.exe
-
Size
508KB
-
MD5
442c7463d55acf27c59fe8fda5f07200
-
SHA1
6befd8eed0d10404b2a4a030a265be07c192f416
-
SHA256
d9122f52b95e2cb08a7fdb1146d212d1dbc9b7f3fb7d59c7717f2735f45cd963
-
SHA512
c1559a020c7d5f35c0a910c31299e416d1b6bdb84bd7f55295e0f0ec76a7d5afec82ea163da2d5e174e99462e6f1bae5a877d30bbab3a52ec18752321c89173e
-
SSDEEP
12288:q0fB42YnV55EyJwPPhsqcRHOkxJ8/JkLjwrHQnpIH:qsxPyJwP3cRHFxJGJkLjlpIH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 442c7463d55acf27c59fe8fda5f07200N.exe
Files
-
442c7463d55acf27c59fe8fda5f07200N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE