Behavioral task
behavioral1
Sample
157dc4edb7dcbdfbc09ed2839bdf6530N.exe
Resource
win7-20240903-en
General
-
Target
157dc4edb7dcbdfbc09ed2839bdf6530N
-
Size
167KB
-
MD5
157dc4edb7dcbdfbc09ed2839bdf6530
-
SHA1
5342baaa5e92d2b50fd5d55ef6e4b549c716cef4
-
SHA256
7656ba034f48f094d1ebb493b44820b44c1d85e5f7a76f71d7c7f33db3a7455a
-
SHA512
b6ce2d14f9f1fd963cbba733663ca951d5e089c01f3109e45da1f7a2aeb79445830c164d84c2fa4447bade8247b4d84878ae4306d895355aa8d6277c5ba3fcd2
-
SSDEEP
3072:fny1tEf+LG/KZGMqWHIjN3tj6qnv0b2UrXkbvLW:KbEf4GMNIjNDv0bNXkbvLW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 157dc4edb7dcbdfbc09ed2839bdf6530N
Files
-
157dc4edb7dcbdfbc09ed2839bdf6530N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE