Behavioral task
behavioral1
Sample
bbe91a80aad58472964615d5438ee5b0N.exe
Resource
win7-20240903-en
General
-
Target
bbe91a80aad58472964615d5438ee5b0N.exe
-
Size
96KB
-
MD5
bbe91a80aad58472964615d5438ee5b0
-
SHA1
585340ea5428d661b93d437326b8ff62d5468cb9
-
SHA256
0af8f2cd107bee7f80e913c1591b17c76cf59498587935ea25e3830ae73d8217
-
SHA512
dd81f6426264d674932f5ec4320ff2de4bee6fe9122280ed38a1cfb88530585f1b47cc33e3fff2c133464f62fbc65e550c5b93724db2e3283837536c066ec7b3
-
SSDEEP
1536:W1A0YjIyeC1eUfKjkhBYJ7mTCbqODiC1ZsyHZK0FjlqsS5eHyG9LU3YG8n0:WA9dEUfKj8BYbDiC1ZTK7sxtLUIGr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bbe91a80aad58472964615d5438ee5b0N.exe
Files
-
bbe91a80aad58472964615d5438ee5b0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 496KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 77KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE