Behavioral task
behavioral1
Sample
4251caaffce0a5978fd40a152ba56730N.exe
Resource
win7-20240729-en
General
-
Target
4251caaffce0a5978fd40a152ba56730N.exe
-
Size
65KB
-
MD5
4251caaffce0a5978fd40a152ba56730
-
SHA1
50c34bc8a6fee697cf96f9486f2856c80879df12
-
SHA256
f68a78d5d2e320400eb65d9cda533f1dea186402d9d5715ed3f3c5f5a1f061a7
-
SHA512
cfd6c240477a4ba8334321573c51a1f1337488c6b207250fab6d1ec2231d15d8982ca778a0c68688d26e2ab2359687a4629116c1223236a1d52ecd4ee777ca2b
-
SSDEEP
1536:DvQBeOGtrYS3srx93UBWfwC6Ggnouy8TLUQeXk+B:DhOmTsF93UYfwC6GIoutzeXh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4251caaffce0a5978fd40a152ba56730N.exe
Files
-
4251caaffce0a5978fd40a152ba56730N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.textbs Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE