Behavioral task
behavioral1
Sample
a9d90ddcc2aef9c79c1c170885590d70N.exe
Resource
win7-20240708-en
General
-
Target
a9d90ddcc2aef9c79c1c170885590d70N.exe
-
Size
130KB
-
MD5
a9d90ddcc2aef9c79c1c170885590d70
-
SHA1
fd4f5eba690aa350089fd6a3e23932cb28e4d7d3
-
SHA256
b00ef9556bca5cd4d94bfe85f75c83acb439a5e09d4f3a3fa68d19043907639a
-
SHA512
66b712fa5cfddf83e8248c6b58439f54fbb081d606b8df4ead5fd816a3ed861d5fd72026d123e8e64f7ce8a8793822b183d962e4c08df9b4f875a508f43ae999
-
SSDEEP
1536:V7Zf/FAxTWoJJ7TrTmXadjUSbcDemTPAZk+cLtdNlb9PfESDOayxaJi:fny1X6W2QZwKS7g
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a9d90ddcc2aef9c79c1c170885590d70N.exe
Files
-
a9d90ddcc2aef9c79c1c170885590d70N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE