Behavioral task
behavioral1
Sample
fb291ed391af1efa594ba088843c3750N.exe
Resource
win7-20240704-en
General
-
Target
fb291ed391af1efa594ba088843c3750N.exe
-
Size
826KB
-
MD5
fb291ed391af1efa594ba088843c3750
-
SHA1
502d566223f491c310cbd715cd10e72664e1b245
-
SHA256
a96349c9f1acc8b866268ecac12ea8024b87ae7248b69c07e9c7b71d820a7cd5
-
SHA512
7cc56af9ed71a635ee927801bea35bc7e5c15023e486b27770cb43008c979aace2e255bc86579b252c9e8b0fdd707f589e0231e8363aa60cb2d9cb7cd9bbe39e
-
SSDEEP
3072:fnyGnfzoMGZuU/yYoIqCdIwHSwxnlyWHIjN3tj6qnv0b2UrXkbvL2:KGnfEPoUQcVIjNDv0bNXkbvL2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb291ed391af1efa594ba088843c3750N.exe
Files
-
fb291ed391af1efa594ba088843c3750N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE