Behavioral task
behavioral1
Sample
d5e3c82949839b4214994f85528625c0N.exe
Resource
win7-20240903-en
General
-
Target
d5e3c82949839b4214994f85528625c0N
-
Size
4.4MB
-
MD5
d5e3c82949839b4214994f85528625c0
-
SHA1
ddb0fd99c7e23cab89e581e9025444bb54cefac7
-
SHA256
48c4c5cd45c0baa2df414313c448167d6dbd2675cb25d60aa695551e6017dfeb
-
SHA512
1361387e6bf41b38bddf2e5a413d0f1f65c84b57e973fe6b912745ddc6f9215638a451f9a081eff721b650d12f781f60bfa28945e5bf8ce8c5d53326e0b9a6d5
-
SSDEEP
98304:uIaOv7kymbaZTvM7QKpOR52IMHleDEbOGMiTI:uVVaOoR5LCluEbjM9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d5e3c82949839b4214994f85528625c0N
Files
-
d5e3c82949839b4214994f85528625c0N.exe windows:8 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 496KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1016KB - Virtual size: 1020KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ