Behavioral task
behavioral1
Sample
496a3eedf3647debb97a29f9a42251f0N.exe
Resource
win7-20240705-en
General
-
Target
496a3eedf3647debb97a29f9a42251f0N.exe
-
Size
3.6MB
-
MD5
496a3eedf3647debb97a29f9a42251f0
-
SHA1
984b2557d71c1ee7547685e7804ecb6c5cfa9203
-
SHA256
b08b455a3731e47cc1ae9e3b76358e9ac55e8e5381987a7f63da7531599eaede
-
SHA512
c974684e3b4969db2c1c339fd492977fd9a9a6368d8d470b653562cd2e4f5bef04750941d859e7ac5484900f62c063bedcb66c155bcf24a77e98c1c7b05eb0a5
-
SSDEEP
24576:zsSj+tScZdWS3sVGVyWj4XAB1gGxLKbSe5H27gUX9byX5v1xyZUJyWqsmsWSgfbk:YS6shQ19y3C+oW+RljsRx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 496a3eedf3647debb97a29f9a42251f0N.exe
Files
-
496a3eedf3647debb97a29f9a42251f0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE