Behavioral task
behavioral1
Sample
02144d96c5076042d5a6b18686a238e0N.exe
Resource
win7-20240903-en
General
-
Target
02144d96c5076042d5a6b18686a238e0N.exe
-
Size
518KB
-
MD5
02144d96c5076042d5a6b18686a238e0
-
SHA1
f2a7c06fbc91ddc3d43badee05317dd6da104cc7
-
SHA256
f7daed4e354651f715dbfd8ce2f4dd48ace95cdde1055d5b96c3d2706560953c
-
SHA512
ca68d1b35e1c5ce8c5d6807f0a2e694cf0561f6102a0d2048abde513b68cdae660f01f10a31d6df93507556c4d985ed7a3217a3920ceb3b9472e5750bea5a507
-
SSDEEP
3072:fny1rK1VXHmgYq8YdcM7JqPJmvi55ryEelGSnRB1WENocmA:K9K1VXGgY/YJiuH/xFiA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02144d96c5076042d5a6b18686a238e0N.exe
Files
-
02144d96c5076042d5a6b18686a238e0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE