Behavioral task
behavioral1
Sample
94e04c8fcd1408de38c83ca37d717d20N.exe
Resource
win7-20240708-en
General
-
Target
94e04c8fcd1408de38c83ca37d717d20N
-
Size
89KB
-
MD5
94e04c8fcd1408de38c83ca37d717d20
-
SHA1
ce05c79578cbc50fa4029d8e6a8765184769e107
-
SHA256
93eeba47e00f025cdb737a0818fdcd3adaa4da192b22a538a395d44ab20e2e82
-
SHA512
481d3fd7b436cad43a74c00604462cfcf19f5902920d62dc3fb16ffb4548d7ef3c49021a2401b8129c814ace0cbe28ea82a8eb044f933413c7737a46a9744f71
-
SSDEEP
1536:xvQBeOGtrYS3srx93UBWfwC6Ggnouy8q5kNJ8mGltIIgKsQRVUVMkOkp:xhOmTsF93UYfwC6GIoutqiJ8mqtbfUVj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 94e04c8fcd1408de38c83ca37d717d20N
Files
-
94e04c8fcd1408de38c83ca37d717d20N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE