Behavioral task
behavioral1
Sample
e177592b7959f6234d347a16a4ce9930N.exe
Resource
win7-20240705-en
General
-
Target
e177592b7959f6234d347a16a4ce9930N.exe
-
Size
122KB
-
MD5
e177592b7959f6234d347a16a4ce9930
-
SHA1
7b2d9c91b81d044061481ce958138c0344546549
-
SHA256
5d0eb90206b5d0992534b5c3b5cf04930c185304d3beb3dbcaa4bff94e574cf6
-
SHA512
8b31cb46421fc2851ee685c16918c87b8044c7e64578bfd1b7b3c5c0aae9a4e91fda2765b13415972d0c9799f6dd3ff21c313267a2955b28d53d67ae966fbe11
-
SSDEEP
1536:V7Zf/FAxTWoJJ7T1TmXadjUSbcDemTPAZk+cLtdNlb9PfESDOayxaJ0:fny1x6W2QZwKS7i
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e177592b7959f6234d347a16a4ce9930N.exe
Files
-
e177592b7959f6234d347a16a4ce9930N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE