Behavioral task
behavioral1
Sample
75d1d22004ffdcee62ebb72ee8ffe590N.exe
Resource
win7-20240704-en
General
-
Target
75d1d22004ffdcee62ebb72ee8ffe590N.exe
-
Size
1003KB
-
MD5
75d1d22004ffdcee62ebb72ee8ffe590
-
SHA1
3c144ebde27c14f91c54ec727804c4afcb55c331
-
SHA256
f55c346ddeae03b0faabea9c3fb04c7879fcab135a119379034e77389edcd00c
-
SHA512
24b4ac74eec1fbd9f7b1600f5cfb8ce578ddc885cecf5d6831eb81b0fca6bccf8f5d742360daaee74adb6f0b373d13a6bd3c4aa7c0a8c5aa63b53bb4f5479931
-
SSDEEP
24576:/zPX+OD+K1kPcnh1/DIbYvrrN+d8wrvAta4eCT:/zPX+OD+eiWhhSYv/od8wTAta4NT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 75d1d22004ffdcee62ebb72ee8ffe590N.exe
Files
-
75d1d22004ffdcee62ebb72ee8ffe590N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE