Behavioral task
behavioral1
Sample
6f431658d2e88e325aac173c01484750N.exe
Resource
win7-20240705-en
General
-
Target
6f431658d2e88e325aac173c01484750N.exe
-
Size
159KB
-
MD5
6f431658d2e88e325aac173c01484750
-
SHA1
e092ebbee8fade34b084cf134bf26cb7f2d6af74
-
SHA256
aae3e976f2b8effc85f5061e39bed0bc9e796ad18ad7465f1d88d7e589455118
-
SHA512
c9c388a9b0747bf7d9cbb5b9319e8d87342274a967e91645c538937eb27a9dbf13b936158d79d1393c643e09f262252a2f6829d6aefb1711033fb43755fa3196
-
SSDEEP
1536:V7Zf/FAxTWoJJ7TTQoQu4pWHlPEXZzjUq3th5f6utM5vLNinVmWvMu0b2UdpXk+i:fny1oRFWHIjN3tj6qnv0b2UrXkbvLp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f431658d2e88e325aac173c01484750N.exe
Files
-
6f431658d2e88e325aac173c01484750N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE