Behavioral task
behavioral1
Sample
a4aabceafb950b3e3ea9b5af3eb13ea0N.exe
Resource
win7-20240708-en
General
-
Target
a4aabceafb950b3e3ea9b5af3eb13ea0N.exe
-
Size
331KB
-
MD5
a4aabceafb950b3e3ea9b5af3eb13ea0
-
SHA1
da19db966b9756fef9a7344590cd188eedb7c1fe
-
SHA256
fbb760232894c7120dc3121fc01cbbe03f9921159bfd2de75ff1048a91fd92ed
-
SHA512
ac2df5e7401932cf46cf2e5a01ef9dc54b835ca4977ba3896abe7900496934c9fca550c68d799610e8762f87023b36eaf192b0125aacb334d09d0f529b5a4ae6
-
SSDEEP
6144:Lcm4FmowdHoSHt251UriZFwfsDX2UznsaFVNJCMKAbeQ:R4wFHoSHYHUrAwfMp3CDQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a4aabceafb950b3e3ea9b5af3eb13ea0N.exe
Files
-
a4aabceafb950b3e3ea9b5af3eb13ea0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE