Behavioral task
behavioral1
Sample
860c306cba06c44ad7cfa5cadf112b40N.exe
Resource
win7-20240708-en
General
-
Target
860c306cba06c44ad7cfa5cadf112b40N.exe
-
Size
159KB
-
MD5
860c306cba06c44ad7cfa5cadf112b40
-
SHA1
eb18a0635bf4a8a7b683867484d8b95a943ad187
-
SHA256
9c7ffbe020bb88156ad6fb48e538d16434de46100a94672662914cf2a168fafa
-
SHA512
54e1bdcb252c13332ba7df912d24d8d7a6949af542fc216289ce39bc39f68cd68ff3c7e1906fed887683c8a04465a1cf84e6bd78ccfc13315e45eca0cf3ac1ad
-
SSDEEP
1536:V7Zf/FAxTWoJJ7TdTW7JJ7TXnEhNwNFkNXNFpiFu9Fy2XNgNFVNVNFomFaMFR01f:fny1K7nW+0JO2XKFbd0F
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 860c306cba06c44ad7cfa5cadf112b40N.exe
Files
-
860c306cba06c44ad7cfa5cadf112b40N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE