Behavioral task
behavioral1
Sample
9493d1dcc93493e7c4cbe614d3e2b530N.exe
Resource
win7-20240729-en
General
-
Target
9493d1dcc93493e7c4cbe614d3e2b530N.exe
-
Size
45KB
-
MD5
9493d1dcc93493e7c4cbe614d3e2b530
-
SHA1
6b0d1917c71434951dbf8ef4293c063a94413fc8
-
SHA256
65a6dca3bfba3b8ecdd180f48e6ced08ba168294ead22ee932a05dae89fe2e62
-
SHA512
3609a04a2b6ab9a67105641d323573b2f3cd6bc3dea223c33cf59cee8db13c02cabe59899cee69c206b3d28b27845285037dac1f036b20305030cb36dfee56e2
-
SSDEEP
768:+vQB0ESOGg1UrYShBbgrrMo98l4yOoBDqANhhY/4El6BhGUVTnbcuyD7UNZuVClE:+vQBeOGtrYS3srx93UBWfwC6Ggnouy8+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9493d1dcc93493e7c4cbe614d3e2b530N.exe
Files
-
9493d1dcc93493e7c4cbe614d3e2b530N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE