Behavioral task
behavioral1
Sample
a41ffdb8ddb5e27c1ad6478d7559f240N.exe
Resource
win7-20240708-en
General
-
Target
a41ffdb8ddb5e27c1ad6478d7559f240N.exe
-
Size
1.0MB
-
MD5
a41ffdb8ddb5e27c1ad6478d7559f240
-
SHA1
f83e04929f3988a3aefc8ac40a8a6a72f83ade97
-
SHA256
eedc4ce191851f845f671e469ad056868d7fd07f7fe853697bff1d1f62b95056
-
SHA512
9a07541981ed54376f202ad1ec0f82d0da4717b01e8cb678165d98b51d73a5731b84bca457458f32c6a52ab1c0688b99050e39da3f3f2d6b69427b808029842b
-
SSDEEP
24576:+A/uXLA5A3c1KdYS+f7vlK13BHUZ50zqLQyow3CqCzt:J/u7A5A3c1KSf7dK11Ur0wQyow3Cpzt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a41ffdb8ddb5e27c1ad6478d7559f240N.exe
Files
-
a41ffdb8ddb5e27c1ad6478d7559f240N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE