Behavioral task
behavioral1
Sample
b8e160ca817f8b0bebd7500d8dae8c50N.exe
Resource
win7-20240704-en
General
-
Target
b8e160ca817f8b0bebd7500d8dae8c50N.exe
-
Size
164KB
-
MD5
b8e160ca817f8b0bebd7500d8dae8c50
-
SHA1
91ba17ac4e3e4d34b6aa50e5002fc40bb6b5e936
-
SHA256
75ca86b5662ccba54344402fe480c71fd0f05ad7dccb1423e760ffe6b7df0706
-
SHA512
fb17eea50ebf1453731f9b70aa46ed8d05d4b22f7c9d4e4abded8dbc97f4530e61d7e1f17eb7247d93476d2d1002a157ccdcd1ac83c44245755b8366c58f2cc3
-
SSDEEP
1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8zxQiKJAWJArFYLSmFYLSklPdA3NyaM6t:fnyiQSoCGGmGGmPdA9yaMDT2p
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b8e160ca817f8b0bebd7500d8dae8c50N.exe
Files
-
b8e160ca817f8b0bebd7500d8dae8c50N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE