Behavioral task
behavioral1
Sample
7016d59ffccdba2b5f5b3cbaea6c0b80N.exe
Resource
win7-20240708-en
General
-
Target
7016d59ffccdba2b5f5b3cbaea6c0b80N.exe
-
Size
452KB
-
MD5
7016d59ffccdba2b5f5b3cbaea6c0b80
-
SHA1
c226262cfc0732412a029113017e52fdc0ac60a1
-
SHA256
2ee0d6b444aa09aab827828e1bdc577ddec46a45a4403dab8f0495f7a9666f39
-
SHA512
840c224cf594d4ece5966dc1a3538585b6f33ad7c1a89fcd5e4e4ed9d138a2f1b381a7d3472569241e557e977c7f5c807510fc3448a4d4a9df42c8175c5dc822
-
SSDEEP
12288:y4wFHoS3eFp3IDvSbh5nPYERAAUDCa4NYmj:HFp3lz1XUDCaGYmj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7016d59ffccdba2b5f5b3cbaea6c0b80N.exe
Files
-
7016d59ffccdba2b5f5b3cbaea6c0b80N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE