Behavioral task
behavioral1
Sample
d06fb17f40c1fd881c14ea8a70fc9db0N.exe
Resource
win7-20240903-en
General
-
Target
d06fb17f40c1fd881c14ea8a70fc9db0N.exe
-
Size
38KB
-
MD5
d06fb17f40c1fd881c14ea8a70fc9db0
-
SHA1
71e957799d19f648fa90a71dcea35972e492bc79
-
SHA256
fbb5628e6ed4947df4371b251a2f1938125a291738c3fc01cf5c5ebfe32858db
-
SHA512
7fc71472bd29caebc623e78e4ae0c3f76246705b1529820cca73cb8ed335ef8fe6f2c641418a9a606f5d9c794e173b39a7562f48bb291c94ee2b518623ec9eba
-
SSDEEP
384:LWeRwjfuP1D0MbyFxEE4oWrh77RhmSb8ob1LCHxQ4TpTsfdjaQ4tjkWE8nh:LWeabqR0MbAKr1mSglRxTN2GjEa
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d06fb17f40c1fd881c14ea8a70fc9db0N.exe
Files
-
d06fb17f40c1fd881c14ea8a70fc9db0N.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE