Behavioral task
behavioral1
Sample
c4204b4105635393b2924d6dc2515990N.exe
Resource
win7-20240704-en
General
-
Target
c4204b4105635393b2924d6dc2515990N.exe
-
Size
56KB
-
MD5
c4204b4105635393b2924d6dc2515990
-
SHA1
059d6cb2f6293a10654a592dff1c6e56cc73381f
-
SHA256
e6c2cea725a72e6028f8638a7ba7c8f556bf8b65e685d39083bc7d179a868c37
-
SHA512
7696f9b5cddc8f306736e395dfffa7607c5497c583d48283589ba71f5a60ff023b9145af3541b149a50cf7c2144682895de794c2b31dd5cec92b85b1e454f868
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcI9DJKGJK9/t:V7Zf/FAxTWoJJ7ThJKGJKT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c4204b4105635393b2924d6dc2515990N.exe
Files
-
c4204b4105635393b2924d6dc2515990N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE