Behavioral task
behavioral1
Sample
2564e3d1455135b581dc0ae3c32bee40N.exe
Resource
win7-20240704-en
General
-
Target
2564e3d1455135b581dc0ae3c32bee40N.exe
-
Size
1.0MB
-
MD5
2564e3d1455135b581dc0ae3c32bee40
-
SHA1
a537a850716305beda0ef5721f508120fc7c0258
-
SHA256
7324b6ba37f3192d6eb7a13c1475052ef974e301a5e5c72878dbe7bc671f5a85
-
SHA512
a0be5f691ba1a361fdf680083adc158495f67e73a23ec3b79449fa92485713a6715a38e39283b27f229bc8edca8ec8beacd845198c1c07a609bc73be9f7c15b9
-
SSDEEP
12288:VQtXeFDnDd9qW1yp//fEDti9C28IQ9K2QkX45gl6ZDovVEg:VIXaN1i/8Yh8IQYDkogOS3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2564e3d1455135b581dc0ae3c32bee40N.exe
Files
-
2564e3d1455135b581dc0ae3c32bee40N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE