Behavioral task
behavioral1
Sample
c4da68b506c3f50cc4d93b1c2408b4f0N.exe
Resource
win7-20240708-en
General
-
Target
c4da68b506c3f50cc4d93b1c2408b4f0N.exe
-
Size
135KB
-
MD5
c4da68b506c3f50cc4d93b1c2408b4f0
-
SHA1
b542909ff92da7e2857ba433f60803794deae314
-
SHA256
2b9de01cd03f115e270af2a0b8c6126987bdb4ab8506498c30c8217bce6495a6
-
SHA512
1a22f3ca98778d3b205723a7e627f4bd0878b28221a0db80f9409cae6da782cc1f499f4838277b7dbe8accd6ce52873fc06b3266f831eae07e35e9909b29e1e6
-
SSDEEP
3072:khOmTsF93UYfwC6GIoutpYcvrqrE66kropO6BfDKPe2Oo9GM8e:kcm4FmowdHoSphraHcpOaKH9h8e
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c4da68b506c3f50cc4d93b1c2408b4f0N.exe
Files
-
c4da68b506c3f50cc4d93b1c2408b4f0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE