Behavioral task
behavioral1
Sample
4a299df71944bc9509f529a25fe8bdf46276547a7c4f75be1e067d1a38b95ce1.exe
Resource
win7-20240704-en
General
-
Target
4a299df71944bc9509f529a25fe8bdf46276547a7c4f75be1e067d1a38b95ce1
-
Size
55KB
-
MD5
7465b6eff00953c986d91d708a570652
-
SHA1
809202661f2966d03fdce000f1bfe7f6ebf50183
-
SHA256
4a299df71944bc9509f529a25fe8bdf46276547a7c4f75be1e067d1a38b95ce1
-
SHA512
15aea0f7d8d760eefef7dcaa37ad4401a9ba5d1e46f0202b3b0dcef2b5783a86ec18c531078601fcc47eef770f15a04723d287ab5c6df9ce6ea466698e265bea
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcI9xP8X:V7Zf/FAxTWoJJ7TIX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a299df71944bc9509f529a25fe8bdf46276547a7c4f75be1e067d1a38b95ce1
Files
-
4a299df71944bc9509f529a25fe8bdf46276547a7c4f75be1e067d1a38b95ce1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE