Behavioral task
behavioral1
Sample
5e50fb0f6d8d2832533661e0a91123d0N.exe
Resource
win7-20240704-en
General
-
Target
5e50fb0f6d8d2832533661e0a91123d0N.exe
-
Size
90KB
-
MD5
5e50fb0f6d8d2832533661e0a91123d0
-
SHA1
e07d5f3acad12eff5c09999abf15d86086840474
-
SHA256
dc4b51441302b68a53dd11d979eede388c8cead0c83b50774f5fd3187c3642ab
-
SHA512
28ff2b7f0a7eba48c92ebcbd999e1f5fcfcb1bcb1e44d0664aa176e0ea32919980aed5456311897e78ecd19f3c7620c1592483ab2ab762f7d4d5f7fd4aead906
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcI9VjmKK9bYroWAYTYnGaq/:V7Zf/FAxTWoJJ7TDaERT+G9v/n
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e50fb0f6d8d2832533661e0a91123d0N.exe
Files
-
5e50fb0f6d8d2832533661e0a91123d0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE