Behavioral task
behavioral1
Sample
af29c436251e36c9abd70e28f52d57f0N.exe
Resource
win7-20240705-en
General
-
Target
af29c436251e36c9abd70e28f52d57f0N.exe
-
Size
153KB
-
MD5
af29c436251e36c9abd70e28f52d57f0
-
SHA1
bc7b0225969988396170fc4996c8847a4d1e8787
-
SHA256
694a55d74be96795177817c6de1af99fedf612d0c87e8560ec06a8b1fa082541
-
SHA512
839f536f6ce55014e4163dc7fe1cc68d759b4e30e4cc77d7ef6d19bb3903323dcdf3da18e6f3a28f2f2f5e2778ea3fe4f1e64b3e0093dd33202066d8879a169e
-
SSDEEP
1536:V7Zf/FAxTWoJJ7TB4pWHlPEXZzjUq3th5f6utM5vLNinVmWvMu0b2UdpXk+p0Rph:fny1gWHIjN3tj6qnv0b2UrXkbvL9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af29c436251e36c9abd70e28f52d57f0N.exe
Files
-
af29c436251e36c9abd70e28f52d57f0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE