Behavioral task
behavioral1
Sample
3090ab7b6d3cab767de4f82e3f099bc0N.exe
Resource
win7-20240903-en
General
-
Target
3090ab7b6d3cab767de4f82e3f099bc0N.exe
-
Size
915KB
-
MD5
3090ab7b6d3cab767de4f82e3f099bc0
-
SHA1
b837484d8a635b1c0cc8b832a36ea59d87d5761e
-
SHA256
747d2bfd7d161f4234ed03d0bb37e1ea2b54e68c88bcce6b0111e8469855618c
-
SHA512
ef140e4b6e238c23e3ee2a35a62b998950fc8cbd2ba360dafc411453bc1a89ce469f302f511b651dda26f8e0dd108fa48c57598d37fb05405eb524a86112f2b5
-
SSDEEP
12288:VQtYYmQtYYGplBprD2S+/I6bUutJF3rNx:VIYYmIYYGpDprwbJFb/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3090ab7b6d3cab767de4f82e3f099bc0N.exe
Files
-
3090ab7b6d3cab767de4f82e3f099bc0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE