Behavioral task
behavioral1
Sample
60ea860b00382b4b9ae3f075c51d9160N.exe
Resource
win7-20240708-en
General
-
Target
60ea860b00382b4b9ae3f075c51d9160N.exe
-
Size
210KB
-
MD5
60ea860b00382b4b9ae3f075c51d9160
-
SHA1
5c0fa8ccfbaf21e3023b40544a7d6b42bd9bed62
-
SHA256
51c09074e08ef0393e6947f96e2bf1c8b0263cf24e8fbbbf9246bb5fa30ce391
-
SHA512
b00089259f3e66733e2771e278ac152f0bf5ef89b793fb1eb63096e0b5322cd99dbaa67114e3646cef2888c306a34b288a3fa05bb06bc51e2d2880f15354bd6f
-
SSDEEP
3072:fnyiQSox5fpjvKdBgrkWHIjN3tj6qnv0b2UrXkbvL2:KiQSox5fpjvzIjNDv0bNXkbvL2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 60ea860b00382b4b9ae3f075c51d9160N.exe
Files
-
60ea860b00382b4b9ae3f075c51d9160N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE