Behavioral task
behavioral1
Sample
5ea158f37cbee68f0ad286d1e47079b0N.exe
Resource
win7-20240729-en
General
-
Target
5ea158f37cbee68f0ad286d1e47079b0N.exe
-
Size
6.0MB
-
MD5
5ea158f37cbee68f0ad286d1e47079b0
-
SHA1
18bdf6580abfd222db407ffebe9a7524f5ba9d61
-
SHA256
c2e321d902b36a95ba7c93f6df31631f87e251411907a996aa2820f4f26a13ba
-
SHA512
139a6c302756690a2bdd3eab045022ef9e4a4df194a6f7e7cd0e075a3f8b39f3e006745fe5bda735992a3361d4e437300565fd3c489a34a99e40adc9b041faa6
-
SSDEEP
49152:DFIFb7iwcFpReeRPVD3TEfSofVGjhf5dyLMA/X9XFGt9foq/gvDJRdX4MdyLMr:DZwGje4Puaofghf5nA1MB/gvDjpznr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ea158f37cbee68f0ad286d1e47079b0N.exe
Files
-
5ea158f37cbee68f0ad286d1e47079b0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 6.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 159KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE