Behavioral task
behavioral1
Sample
d656012582cd9befa091f9052fd5bc00N.exe
Resource
win7-20240903-en
General
-
Target
d656012582cd9befa091f9052fd5bc00N
-
Size
1.0MB
-
MD5
d656012582cd9befa091f9052fd5bc00
-
SHA1
21cc1929c7f3bf12c9a2cd5603a46df5bbb1ae4f
-
SHA256
b780ddcaf7ca0205e2a25a2fdc979a9eb98c847805ee616758b5f0c29b1e6aa8
-
SHA512
01ce7a1651f966d66d8bced6ad70321e90c4d812cc01c3fcad441671373830982ff78646a0687a0c3c92fb068bdefefc07303a14947d843b84229acc048d0501
-
SSDEEP
12288:l2i3/3v3f3O/MOigxkR6qNoechsnV5FUT5dDn7jKidLsCzILNKOgF3jCTJoS5:c/agKRzNoecwV5FenigzIR5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d656012582cd9befa091f9052fd5bc00N
Files
-
d656012582cd9befa091f9052fd5bc00N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 668KB - Virtual size: 668KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 384KB - Virtual size: 388KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE