Behavioral task
behavioral1
Sample
b3f6adaf00a1888e5ab609ec3e1329d0N.exe
Resource
win7-20240729-en
General
-
Target
b3f6adaf00a1888e5ab609ec3e1329d0N.exe
-
Size
179KB
-
MD5
b3f6adaf00a1888e5ab609ec3e1329d0
-
SHA1
afc5311bd864cd2b7e8201f09d60e04672283435
-
SHA256
568e407f89934ce251ad6bacb822729d8620193ff6c01e704c6aea06f6144e24
-
SHA512
679679376bfa2dcd02618ef42e5f8483b26d33f215959257811931a47cfc6fd7d726a62ece2efe5ea981bb5ddf3c7bfe681e7227a7145108c7d3a2bc8a4c4dda
-
SSDEEP
3072:fny1ndDoybBjWHIjN3tj6qnv0b2UrXkbvLT:KReybBQIjNDv0bNXkbvLT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b3f6adaf00a1888e5ab609ec3e1329d0N.exe
Files
-
b3f6adaf00a1888e5ab609ec3e1329d0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE