Behavioral task
behavioral1
Sample
4dd70bbe2f8147949d8b3752f265ff30N.exe
Resource
win7-20240903-en
General
-
Target
4dd70bbe2f8147949d8b3752f265ff30N.exe
-
Size
1.1MB
-
MD5
4dd70bbe2f8147949d8b3752f265ff30
-
SHA1
cad120455e7963397cfc648553df4849b5098205
-
SHA256
b8437037fc4776e89a0ba02433406db5bb15db99196618de77c83408c4396cae
-
SHA512
f52be9195bf395837103ad9f4aa0d55309491c9ce767800ab17e48474119590991ae52ffbdc011531ada1df12ea894955a96d94118ffb175bcf6ce4b4095e276
-
SSDEEP
24576:b2HJFo2oFyfdnfZcVSuKsH2f20FkEW2z7seb7Dbq52che6WsBEJk:cs2oFyffcVSO0O4F/U4TNJk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4dd70bbe2f8147949d8b3752f265ff30N.exe
Files
-
4dd70bbe2f8147949d8b3752f265ff30N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE