Behavioral task
behavioral1
Sample
141643765c31ee66e4965de941027120N.exe
Resource
win7-20240903-en
General
-
Target
141643765c31ee66e4965de941027120N.exe
-
Size
151KB
-
MD5
141643765c31ee66e4965de941027120
-
SHA1
0f1a52653df758fd21f137cdce292300605b49dd
-
SHA256
5d8911bd4f961b62c57afb04323d2dc19cfad45263508eadbe7640e00945dc15
-
SHA512
6eb517e79e9c1da75232f7efe5cca09100a7b7debc2d3e2b259f5c4c587a20b128d70bffe4bbf94a5cc99b1108d9943429e2429df308e216833936aeea52768b
-
SSDEEP
1536:V7Zf/FAxTWoJJ7TTQoQv585EJEhNwNFkNXNFpiFu9Fy2XNgNFVNVNFomFaMFR01p:fny1oRv585EJW+0JO2XKFbd0D
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 141643765c31ee66e4965de941027120N.exe
Files
-
141643765c31ee66e4965de941027120N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE