Behavioral task
behavioral1
Sample
b9e70d6983d4cb1c9e264c8a06074890N.exe
Resource
win7-20240903-en
General
-
Target
b9e70d6983d4cb1c9e264c8a06074890N.exe
-
Size
76KB
-
MD5
b9e70d6983d4cb1c9e264c8a06074890
-
SHA1
27ddb9e6b2c6b76cad29d2dbcaf0d0bde754ceaf
-
SHA256
512196c339cc557e3666924074d4a19b3feafbe2b501dd770f24a29d429bc988
-
SHA512
980c17504ad1eda0754b1ab7712808018185f8f80f85c7915d245b46ec3198aaf6026f5e22645468d7263d1e5b5d7968908f52a04c65d37912995b97f7fe080d
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcwBcCBcw/tio/tirZSZu+Oc:V7Zf/FAxTWoJJ7TTQoQ4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9e70d6983d4cb1c9e264c8a06074890N.exe
Files
-
b9e70d6983d4cb1c9e264c8a06074890N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE