Behavioral task
behavioral1
Sample
b28d586c6b01dbb7e4e348c964eb2c10N.exe
Resource
win7-20240704-en
General
-
Target
b28d586c6b01dbb7e4e348c964eb2c10N.exe
-
Size
489KB
-
MD5
b28d586c6b01dbb7e4e348c964eb2c10
-
SHA1
f499728ca4f608e83ce2ced4f8bfec1514777dd6
-
SHA256
5293ee877d5f2e78133a7fb911c88807e1625f7bfe5f9a10c7d39828a231cdbe
-
SHA512
0b492eeb6c3357b773acd27124699a83276e72c35efc4d22b99a48d86e2ec4d351ed9e6da1cba0e20c88fe14741b27618c0a91b2586602630cf6bcf94489e00a
-
SSDEEP
6144:xcm4FmowdHoSkhraHcpOFltH4t+IDvSXrh5g8hZTydOAkOCOu0EajNVBZr6y2WX8:74wFHoSceFp3IDvSbh5nP+aim
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b28d586c6b01dbb7e4e348c964eb2c10N.exe
Files
-
b28d586c6b01dbb7e4e348c964eb2c10N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ