Behavioral task
behavioral1
Sample
70be8c3013f3ff2ea8769e80c190f560N.exe
Resource
win7-20240903-en
General
-
Target
70be8c3013f3ff2ea8769e80c190f560N
-
Size
109KB
-
MD5
70be8c3013f3ff2ea8769e80c190f560
-
SHA1
db16fc566d504468a340d00d68545fb76f4f2cdb
-
SHA256
aa614ff3af9ff5e3de6df260dc39c7877a9d4f4eed394b1664ba1332a571764e
-
SHA512
52db10abef71b4a2296ca37d3b8fd9e6681e1994890b53d2b773e608cde60bf935b9384d1d50067bb3b524ea15e377d73403a70a11df8d22b74aaafaab1de443
-
SSDEEP
1536:V7Zf/FAxTWoJJZENTNyoKIKMSwSKWsNxGnpMeojOMUt:fny1tE5KIKzfaNjZUt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70be8c3013f3ff2ea8769e80c190f560N
Files
-
70be8c3013f3ff2ea8769e80c190f560N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE