Behavioral task
behavioral1
Sample
4d6a28e9a87cd9c4e6f957d45973b3d0N.exe
Resource
win7-20240729-en
General
-
Target
4d6a28e9a87cd9c4e6f957d45973b3d0N.exe
-
Size
123KB
-
MD5
4d6a28e9a87cd9c4e6f957d45973b3d0
-
SHA1
688d519a3bdae336bd9c71dd61538507fd964a40
-
SHA256
f92ae0d4d5f61ca0b4a0d4a94c8b41d20c77adc7f957e621461d79e7b876ed07
-
SHA512
139f681305eda202277bcc618e6076f9cea52a727b208a006cd6dd514f734daa7ed6473d006d33c804885a5a4ba306fa4e1110fd9b88e8a734580118dc965354
-
SSDEEP
1536:V7Zf/FAxTWoJJ7TyTmXadjUSbcDemTPAZk+cLtdNlb9PfESDOayxaJu:fny1W6W2QZwKS7Y
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d6a28e9a87cd9c4e6f957d45973b3d0N.exe
Files
-
4d6a28e9a87cd9c4e6f957d45973b3d0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE