Behavioral task
behavioral1
Sample
43c2f985de3052169376a256efdbff60N.exe
Resource
win7-20240705-en
General
-
Target
43c2f985de3052169376a256efdbff60N.exe
-
Size
215KB
-
MD5
43c2f985de3052169376a256efdbff60
-
SHA1
57d07de91d92a6806a681175f538e77447c771a5
-
SHA256
0348c61f3051974310f71e2bd6c48cdd204d84db57ff5965ede3096783135186
-
SHA512
1c2a297a31508818b367f281c278d1c2609db8b183f34fe7ef6b3b7a45e716a336ed25ca1512c94a6c393020a9e3bf2d0ad7dfd9cc04016d60ea5d6fb1472831
-
SSDEEP
1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8zxwTWn1++PJHJXA/OsIZfzc3/Q8zxZvI:fnyiQSoNQSoQvzW+0JO2XKFbd0D
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43c2f985de3052169376a256efdbff60N.exe
Files
-
43c2f985de3052169376a256efdbff60N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE