Behavioral task
behavioral1
Sample
c645cd57331f21893abc1a1797d458d0N.exe
Resource
win7-20240708-en
General
-
Target
c645cd57331f21893abc1a1797d458d0N
-
Size
1.1MB
-
MD5
c645cd57331f21893abc1a1797d458d0
-
SHA1
451a1e4fc2490b8450633e715f40d7473d2583fc
-
SHA256
055cb5d9a2099bb176a6c8fa7bebd4312fb4b9b7103b0bdf1785e7adf09482f1
-
SHA512
f4d72f292880bb9dac90581763460e5751aee1601f0b5e71650c57c4c400cb096860fab0dc217984c2e100936ee81b49eb8a166bc7856cf529fdbf091b3608c9
-
SSDEEP
3072:fny1oosZSnJUwFU+FUhFUeFUXFUqybtriLQFzwK0:KKM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c645cd57331f21893abc1a1797d458d0N
Files
-
c645cd57331f21893abc1a1797d458d0N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE