Behavioral task
behavioral1
Sample
8c791fc45764cc1f1fabdb3f56516e30N.exe
Resource
win7-20240903-en
General
-
Target
8c791fc45764cc1f1fabdb3f56516e30N
-
Size
1.8MB
-
MD5
8c791fc45764cc1f1fabdb3f56516e30
-
SHA1
117e1f542b6448226cb5a9d7edba7ad0567a880c
-
SHA256
b4cf663d9aaf7b44593f39ea49d9f4249d03a39766b1389b54c4bab0682a37b2
-
SHA512
e01a93924546549c7c78dc170d19904081577388e8425ae923ec2e797508d3ad638e0d64e4e8236f8ded698d7d7e5ebc7805ab2bec7c1abb0164e88238429992
-
SSDEEP
49152:jaI4PHUma9sNHFfeHc44wDA/8uHn5oRxC6asALE6EPVw2F:jaI8HU9K7fgP4uAkGuRtaseEPVw2F
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c791fc45764cc1f1fabdb3f56516e30N
Files
-
8c791fc45764cc1f1fabdb3f56516e30N.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 6.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE