Behavioral task
behavioral1
Sample
0966531680beb1041cd89d0d6188f7b0N.exe
Resource
win7-20240903-en
General
-
Target
0966531680beb1041cd89d0d6188f7b0N.exe
-
Size
227KB
-
MD5
0966531680beb1041cd89d0d6188f7b0
-
SHA1
bec18def6807dcc6dc466a2fcfe2f01493e7e14f
-
SHA256
f3488aa2d7f2b7f24dbaeb880f6edb0a966304568ec5d18ebe5b56b248fd78ef
-
SHA512
a696eaa21c2ff798b6e6ed4a659c794d49ca793520fa43f757622c7b324f2b1d898e5d2ce414e26053cb6fa2fc3d534768e929b297c7a37d5f7fed2c6126b0db
-
SSDEEP
6144:jvNzUzbF68H3S8+b6uyptXIi9u/mp8saZHRD4v4M84Z9YkF/GeHNHyORQdcIKt7:jvw68XS8+d8HamysaZHRD44M3ZzF/GeJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0966531680beb1041cd89d0d6188f7b0N.exe
Files
-
0966531680beb1041cd89d0d6188f7b0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ