Behavioral task
behavioral1
Sample
3ea5e26cf845a248160a7d1966782c50N.exe
Resource
win7-20240903-en
General
-
Target
3ea5e26cf845a248160a7d1966782c50N.exe
-
Size
147KB
-
MD5
3ea5e26cf845a248160a7d1966782c50
-
SHA1
f2b79f18530700f1e89b56f21f96b91a17a90c88
-
SHA256
ab7db4bfd50761b67d51e0ff71983c257d984ccf44a3efd7b1e889e25b30ed62
-
SHA512
cf2025162a39dc3676a670951d804c06b32bd6f9cbd2cb3e52febc7a0137b8ccaf4001ce7d26e2bb0efb6954eeb1cfbe4343ea21148610d40042358a3b84ed43
-
SSDEEP
1536:V7Zf/FAxTWoJJ7TgfGK64pWHlPEXZzjUq3th5f6utM5vLNinVmWvMu0b2UdpXk+S:fny1EfnWHIjN3tj6qnv0b2UrXkbvLZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ea5e26cf845a248160a7d1966782c50N.exe
Files
-
3ea5e26cf845a248160a7d1966782c50N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE