Behavioral task
behavioral1
Sample
d6c076c8207220b1f104c77663a08ef0N.exe
Resource
win7-20240704-en
General
-
Target
d6c076c8207220b1f104c77663a08ef0N.exe
-
Size
60KB
-
MD5
d6c076c8207220b1f104c77663a08ef0
-
SHA1
aa9f33c7b7bd7104ed61b41683c19450e86d21b4
-
SHA256
b8db001cee786ad3ff2d30b4da2e3778c1c1b849a2eddeb41f1f377e9e94339f
-
SHA512
8875712ff3dab93bb3f4152864caff0ea265516cb53413f717cfb47bfb084fc220c997c547b6719866e97286eef08557e5d482b223ca8e8242a610a0640aca52
-
SSDEEP
768:r8eRH+MlFh0pDpuJ84WEi+U6sh7iQroCHmyf+RjFBSuB2Xpfs1vAP:r9l+W8xFt6sh7iQroCoRB0u0sNAP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d6c076c8207220b1f104c77663a08ef0N.exe
Files
-
d6c076c8207220b1f104c77663a08ef0N.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 20KB - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE