Behavioral task
behavioral1
Sample
0e4e32125013c60685d8621c8e809780N.exe
Resource
win7-20240704-en
General
-
Target
0e4e32125013c60685d8621c8e809780N.exe
-
Size
181KB
-
MD5
0e4e32125013c60685d8621c8e809780
-
SHA1
a4ec3a77dde76b89383bd04fecab04f6680d39c0
-
SHA256
4b0dafc01615482517adcb14a1423727bffbab2e29c333c10b99d4fc57f520d4
-
SHA512
a00ad55e5c03761bf05bd09ed5c52cfb6f4c7a2c524e5b1ddf54ab25e6c8e32dd1c296cf1fe48a614b05da96ce2e249b52d6475ca1463f4d7e83df26ae4da242
-
SSDEEP
1536:V7Zf/FAxTWoJJ7TYTW7JJ7TY6y4pWHlPEXZzjUq3th5f6utM5vLNinVmWvMu0b2c:fny1TvWHIjN3tj6qnv0b2UrXkbvLK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e4e32125013c60685d8621c8e809780N.exe
Files
-
0e4e32125013c60685d8621c8e809780N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE