Behavioral task
behavioral1
Sample
91eab2c0969982093b9b80a299406040N.exe
Resource
win7-20240708-en
General
-
Target
91eab2c0969982093b9b80a299406040N.exe
-
Size
366KB
-
MD5
91eab2c0969982093b9b80a299406040
-
SHA1
dfbdc14d027f2ab2cb785e3d62b15a5df64f5f00
-
SHA256
42a9ed76b8b2eb8cda28fdb9242ad9a491e7fa8877cba72dbbfed2d1da13a163
-
SHA512
9847ccdd5bfc7e075bfa1d934bd5fc19a63b171851e68d039970fca044dc580d078f43fcc777dc0762bf0e629600e75c7a79c7bdd2462284660e04c4e12e0664
-
SSDEEP
6144:9cm4FmowdHoSdSyEAxyx/ZrTTr4qIMgE8U:/4wFHoSQuxy3rTXIM18U
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 91eab2c0969982093b9b80a299406040N.exe
Files
-
91eab2c0969982093b9b80a299406040N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE