Behavioral task
behavioral1
Sample
ca1936590d4d4eecdcac7c6f7b211270N.exe
Resource
win7-20240729-en
General
-
Target
ca1936590d4d4eecdcac7c6f7b211270N
-
Size
455KB
-
MD5
ca1936590d4d4eecdcac7c6f7b211270
-
SHA1
1df2d69c0438a1f343bc2cfdaecf5efe6706976f
-
SHA256
b1c9d6e82592b40268f2fbb9f19ac78b80ee1b8d0b5ff4fb7e966bcf88c2e731
-
SHA512
973f05b75c26afebf7c400a7d4d76ec05ce1af8513c861889bd121a35b5d89e4025d7bf197a12eff77ee8fddc12379324452d1c99363e212fa1b22660f0f7fd0
-
SSDEEP
6144:rcm4FmowdHoSphraHcpOaKHpXfRo0V8JcgE+ezpg1xrloBNTNWv:x4wFHoS3eFaKHpv/VycgE81lgWv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ca1936590d4d4eecdcac7c6f7b211270N
Files
-
ca1936590d4d4eecdcac7c6f7b211270N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE