Behavioral task
behavioral1
Sample
5e5992034f5eb2a1aa96034143c59620N.exe
Resource
win7-20240729-en
General
-
Target
5e5992034f5eb2a1aa96034143c59620N.exe
-
Size
99KB
-
MD5
5e5992034f5eb2a1aa96034143c59620
-
SHA1
3183b0e8b3ae9dab05ed12062ae8be3171ac05a7
-
SHA256
a23057ea544970c114eb192367360ea60fafaa72ec6db50b3092eedd52f5715e
-
SHA512
4ebdd2779d681c4e69b9f3ca6dc4a1af181915df3776023ac47be151d23c892ad1c1f9620684c06cf616ab273a271c973269309985a2534f18dde2b64ec9f5f7
-
SSDEEP
1536:/vQBeOGtrYS3srx93UBWfwC6Ggnouy8jb5Di46HcUZR4YjUyDamwNgrCj+Ah:/hOmTsF93UYfwC6GIoutLs+JiZwfx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e5992034f5eb2a1aa96034143c59620N.exe
Files
-
5e5992034f5eb2a1aa96034143c59620N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
vryeypb Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE