Behavioral task
behavioral1
Sample
864991a6e2d4e215e4535253fe58be50N.exe
Resource
win7-20240903-en
General
-
Target
864991a6e2d4e215e4535253fe58be50N
-
Size
65KB
-
MD5
864991a6e2d4e215e4535253fe58be50
-
SHA1
d891c0d0abe6cce478f0c238d168cdf95bc0e05c
-
SHA256
855af8884f16079e1e068573daa8e9876e8e5387677ca810b973ec5dc90b4a75
-
SHA512
134a046d16e3157bff6d22957ef0bfb576b30f0bed0b091d0a25c3221212a7264927374e37722e269e61955966ef786dc2730a2346c4311c2eabe2f791b02354
-
SSDEEP
1536:kvQBeOGtrYS3srx93UBWfwC6Ggnouy8p5yAXNlIQldWwQ2wQ8:khOmTsF93UYfwC6GIoutpYcvldWwQ2G
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 864991a6e2d4e215e4535253fe58be50N
Files
-
864991a6e2d4e215e4535253fe58be50N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE