Behavioral task
behavioral1
Sample
fd850a6a5adba698634c5ea872917c10N.exe
Resource
win7-20240708-en
General
-
Target
fd850a6a5adba698634c5ea872917c10N.exe
-
Size
99KB
-
MD5
fd850a6a5adba698634c5ea872917c10
-
SHA1
dce1384e3b8b16abae15b94f51b6591fd35ba712
-
SHA256
954f4d754f84c1f6bd382affda0530884be99f6d1670fc4a768d9d1f52842052
-
SHA512
8a5b4abb6191bf8e9e1417b79ba02d1f963f53c5412a9bb4fa0b15f014de833d6895e30ea18be21c0339109e2161cbd49abf41d5a0274f21470d19f8249fead7
-
SSDEEP
1536:V7Zf/FAxTWoJJ7TrHSXIBlE3hha08yZySzCeRSZ7M8:fny1vHSXIBlf08qySzCeRS28
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd850a6a5adba698634c5ea872917c10N.exe
Files
-
fd850a6a5adba698634c5ea872917c10N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE