Behavioral task
behavioral1
Sample
d93d569ff59ea5a62178e50eeaf4a310N.exe
Resource
win7-20240903-en
General
-
Target
d93d569ff59ea5a62178e50eeaf4a310N
-
Size
2.3MB
-
MD5
d93d569ff59ea5a62178e50eeaf4a310
-
SHA1
4eb9ba6ff0c22d91b1021c6d782559cb11101e0b
-
SHA256
e9ef3efe7b390a5dea8ad2880c8810c9362768afbcc54a524ceced2f3c4d0fb1
-
SHA512
812b153777e8028b9434bf06671789bdadcde8215bd804f0fd0e08bc9ac3037c9df3166dd3cacf7f5baa8628582d02865f615b540fe5103234aa16cfa256570a
-
SSDEEP
49152:wxxz7Xe7lr0idGdMYibfpfGVI5u++Y4OE1sPRz:+5XahBdOyh5uVM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d93d569ff59ea5a62178e50eeaf4a310N
Files
-
d93d569ff59ea5a62178e50eeaf4a310N.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 13.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 59KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE