Behavioral task
behavioral1
Sample
a3c4a545e3485db05c6033d69a593e10N.exe
Resource
win7-20240708-en
General
-
Target
a3c4a545e3485db05c6033d69a593e10N.exe
-
Size
51KB
-
MD5
a3c4a545e3485db05c6033d69a593e10
-
SHA1
fb229d75e19b82113871d83d2dec9082c97e940b
-
SHA256
17fb63bd3a528b347652f4950e458f1109eeb96ab81048f2e864f040af862696
-
SHA512
cb6f0b1438527133b611833815d46bf74c215af72691d0454ed923bc87049beb7eb1828f4f7c48d20dd0a38c92f3d1814f202b5523e7c97a9787b8cfdc7cee80
-
SSDEEP
768:n8eRH+MlFh0pXrL4i6sh7iQroCHmmbk2ElU/G:n9l+Gi6sh7iQroCLMZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a3c4a545e3485db05c6033d69a593e10N.exe
Files
-
a3c4a545e3485db05c6033d69a593e10N.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 20KB - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE