Behavioral task
behavioral1
Sample
428332d23d34ef65574f181a818820e0N.exe
Resource
win7-20240708-en
General
-
Target
428332d23d34ef65574f181a818820e0N.exe
-
Size
592KB
-
MD5
428332d23d34ef65574f181a818820e0
-
SHA1
2bd6e08832b97fc08efe8e707a1dbbf0148e377a
-
SHA256
9d7f5b85f33779b2e5b2ca5a91710eb18462c9217a962c35c130f6541eb662a5
-
SHA512
0d792cf2ddcf9bb8abf9891229a4f2213498e6e3b92463e984469108bec3fef4034674688734593360785ee6a3b9014c8845a17e25626fff0019d62d15d887fa
-
SSDEEP
3072:wCaoAs101Pol0xPTM7mRCAdJSSxPUkl3V+MQTCk/dN92sdNhavtrVdewnAx3wmVy:wqDAwl0xPTMiR9JSSxPUK6dodH6UT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 428332d23d34ef65574f181a818820e0N.exe
Files
-
428332d23d34ef65574f181a818820e0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 496KB - Virtual size: 496KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 77KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ap0x Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE