Behavioral task
behavioral1
Sample
b2e57abef59fe033d9eed9f64c4207e0N.exe
Resource
win7-20240704-en
General
-
Target
b2e57abef59fe033d9eed9f64c4207e0N.exe
-
Size
151KB
-
MD5
b2e57abef59fe033d9eed9f64c4207e0
-
SHA1
5427cbcd59c9d3987c7e25f332363b550679eac5
-
SHA256
3e503c896674695bc3bfb2851cbf95d7431588cd5a84e910a0cd5178bdd4d546
-
SHA512
67e7169ac592cb21486965e499064394dc206996f8d8d64845828e744d104218b3606811873f4654c20d44f05a9d9215f031f1a4f8536888656b482c7420f30f
-
SSDEEP
3072:fny1oRcRxoRcRyHSXIBlf08qySzCetFtJSuSSSskCTaq:KWRcRyRcR3tJNTaq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b2e57abef59fe033d9eed9f64c4207e0N.exe
Files
-
b2e57abef59fe033d9eed9f64c4207e0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE