Behavioral task
behavioral1
Sample
b6f5114fdfc07a30cc8e60f1d3b67d60N.exe
Resource
win7-20240903-en
General
-
Target
b6f5114fdfc07a30cc8e60f1d3b67d60N.exe
-
Size
123KB
-
MD5
b6f5114fdfc07a30cc8e60f1d3b67d60
-
SHA1
907db92e83c5c9c01253417f0dbd276ed210be3f
-
SHA256
3ea1df00d487fbbe50654770b90e3f5581cd7c9731293c3d02498cc74b66001f
-
SHA512
592e635625cdc0898d1745b9b73d90104206555f5deeb11d1691cf68518ba8cacff589979f67ecfa07b07ea14e8c01e6888ceb015cc6358698a9a7004fb3066a
-
SSDEEP
1536:V7Zf/FAxTWoJJZENTBKq517tcj4asI9qfrSZlyzXOt/09srzH2oZdMNGo6q993n9:fny1tECqHLIwuyKhr1nOV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6f5114fdfc07a30cc8e60f1d3b67d60N.exe
Files
-
b6f5114fdfc07a30cc8e60f1d3b67d60N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE