Behavioral task
behavioral1
Sample
1491f3ed16cb1704a94a874531f36f60N.exe
Resource
win7-20240708-en
General
-
Target
1491f3ed16cb1704a94a874531f36f60N.exe
-
Size
128KB
-
MD5
1491f3ed16cb1704a94a874531f36f60
-
SHA1
c7ab2f9f86b00e5ebe53295e0deaff0e488853ea
-
SHA256
0c94b833e768f6db3a88313b6167756333345ad195c330018960021ef1731f18
-
SHA512
191a20e1c68817bb3fcf820c7286baf30cd90103f6d334f84bc5f8bfcb59da559845084a0128f6d17d682d4a30593eae435dd28931f54938894db6416bbb352a
-
SSDEEP
3072:fny14osZSnJUwFU+FUhFUeFUXFUqybtriLQFzwKc:KSk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1491f3ed16cb1704a94a874531f36f60N.exe
Files
-
1491f3ed16cb1704a94a874531f36f60N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE