Behavioral task
behavioral1
Sample
905c43e509f862185c0f26c33d0db450N.exe
Resource
win7-20240705-en
General
-
Target
905c43e509f862185c0f26c33d0db450N.exe
-
Size
9.9MB
-
MD5
905c43e509f862185c0f26c33d0db450
-
SHA1
fe56c73bc4adcc6170b922c3d69791d5178ee975
-
SHA256
39d704ab2fbc16f476cd3cc74a9ced42df89a9247023d3f9ac946d58793b6c29
-
SHA512
9676e3c281c983fed96dfed48017ad4f223e904a6f0e58feefde639f45364fa9b4efadf6bd2273de0ed09545bd33ec6ac19a420cb038004a0a98e262e60d938c
-
SSDEEP
196608:uBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBSyyyyyyyyyyyyyyyy9:uBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 905c43e509f862185c0f26c33d0db450N.exe
Files
-
905c43e509f862185c0f26c33d0db450N.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 80KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 65KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE