Behavioral task
behavioral1
Sample
36664bed947ca3b0444ba1c3bf7d4740N.exe
Resource
win7-20240704-en
General
-
Target
36664bed947ca3b0444ba1c3bf7d4740N.exe
-
Size
150KB
-
MD5
36664bed947ca3b0444ba1c3bf7d4740
-
SHA1
bf33fd5f6cb0ca08e042beb18b09c0f04ace3163
-
SHA256
1d891452242c351fdcde09d9bfb0a1cf1c2c49686b0dad148469527c411087d3
-
SHA512
8da5209b97cb946ea131517178d617d8ecabcba6233090759a8a4cd473c9155a5260fa806fefbb611c0a69ac3e1e17af26d40b035be6c183d2008430213eb760
-
SSDEEP
3072:fny1me9iMGfUSaOy9SnJUwFU+FUhFUeFUXFUqyqKRrpF6PwZ:Kt9iMGsSaOyi6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36664bed947ca3b0444ba1c3bf7d4740N.exe
Files
-
36664bed947ca3b0444ba1c3bf7d4740N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE