Behavioral task
behavioral1
Sample
a8c920e8810098bfbc3f5f3a25757660N.exe
Resource
win7-20240903-en
General
-
Target
a8c920e8810098bfbc3f5f3a25757660N
-
Size
500KB
-
MD5
a8c920e8810098bfbc3f5f3a25757660
-
SHA1
2231c8ccd0e037fcdaf0993359314dea0157e1e7
-
SHA256
179bee3d233486f4c72d51e3561baf727c05479f21e226a039856db2efaaad41
-
SHA512
65996ebc4fe523483588b28b86eb6c28eb4255a237c99628981cf400f3aab5a5310b5a3426973aae14152c2e51a36edd181c056a5dbae2ff3aca01bd7ea7e11c
-
SSDEEP
12288:S4wFHoSyoS3ebeFmFVvlrmwcT4wpteFmFTxZ:0KFmFVtrRcFEFmFL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a8c920e8810098bfbc3f5f3a25757660N
Files
-
a8c920e8810098bfbc3f5f3a25757660N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zZDZsqMg Size: 5KB - Virtual size: 5KB
CQomaTgl Size: 49KB - Virtual size: 48KB
qGNiLhAG Size: 78KB - Virtual size: 77KB
bybDrNKB Size: 4KB - Virtual size: 3KB
HoMkbazg Size: 512B - Virtual size: 86B
mbOeQqtt Size: 512B - Virtual size: 379B
ChXYvgUo Size: 79KB - Virtual size: 78KB
sSxvnSFd Size: 4KB - Virtual size: 4KB
ajhYLmhh Size: 121KB - Virtual size: 121KB
NtBpNMFG Size: 5KB - Virtual size: 4KB