Behavioral task
behavioral1
Sample
dfed984d01d6d9c8d2077d01179ac990N.exe
Resource
win7-20240903-en
General
-
Target
dfed984d01d6d9c8d2077d01179ac990N.exe
-
Size
159KB
-
MD5
dfed984d01d6d9c8d2077d01179ac990
-
SHA1
3e46a50ae1a239e1e4aed2dc87641f48a327cfd4
-
SHA256
7aeb30e5c1536277add533378d3b820d42a82b98d7ac5ef049a8b425742e1d24
-
SHA512
f813cef15151de66fd4f0d5d707c251ac5e24e7cd670f3b6b0485ce748e3a4ff0c33a39ea7ef3811d4012e2388ff770c2264993be416d391295c36c534bba687
-
SSDEEP
3072:axTqpdA3f6QNf2IPO4DpmWpAsfYbTOBoefYi6a9k20tA3ZQkz1wpsaRQ:c2pdqfv2IPOGfXf5ovWJb1WsUQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dfed984d01d6d9c8d2077d01179ac990N.exe
Files
-
dfed984d01d6d9c8d2077d01179ac990N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE