Behavioral task
behavioral1
Sample
69d5e00a448088bcf02eb0a6f3c34d60N.exe
Resource
win7-20240903-en
General
-
Target
69d5e00a448088bcf02eb0a6f3c34d60N
-
Size
59KB
-
MD5
69d5e00a448088bcf02eb0a6f3c34d60
-
SHA1
f09ec6c7f076a166aaaaad7313d10bd687968604
-
SHA256
8173468ea72042231739f6ddc134d57fcad37b2f07a5734dfcda22bcacbb54fb
-
SHA512
8a49ba3b7c88c73c04c1956e3041cd5d2d441458ba0abef7011c8fc659adeeb64502a3381def225ccca8a00e9abd591a72c5a8cc6686e59d8d3b39178e1d8cc4
-
SSDEEP
1536:SesxmvXUETe4mZgBAOeB2HNgfoT+XUsu+7ZmZRLqoPo:Sesxm/USAV23T94ZmZfo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 69d5e00a448088bcf02eb0a6f3c34d60N
Files
-
69d5e00a448088bcf02eb0a6f3c34d60N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 176KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 58KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE