Behavioral task
behavioral1
Sample
526efa3cf4b0047250092d99b56f3d30N.exe
Resource
win7-20240704-en
General
-
Target
526efa3cf4b0047250092d99b56f3d30N.exe
-
Size
59KB
-
MD5
526efa3cf4b0047250092d99b56f3d30
-
SHA1
8c4af99c48a1349ad0751ccb515fe715730cff07
-
SHA256
8fe1645ec59d78ceee51f408a0c77712d7bb5027e605bc5f664792badd5af814
-
SHA512
8f17ca34679345ce881f95c6a06a590f8a5f1ed6d9b5157ac3f662c35749331b4edc27f14701498368b60f18d69c37ba855f76a8f34627ecb8b1fdf07d05bdac
-
SSDEEP
768:JGkE5HwZJQpfRa39fZkWyxaz7I8YC1PZpTBRph8cd3n9fwv9KIakbe90tNv/45+S:m5QZEfg39ygzBVb1dXivVbe6H8vn7Jt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 526efa3cf4b0047250092d99b56f3d30N.exe
Files
-
526efa3cf4b0047250092d99b56f3d30N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 176KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 58KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE