Behavioral task
behavioral1
Sample
01c2d53e9c351a2d6e2a860e90e65020N.exe
Resource
win7-20240903-en
General
-
Target
01c2d53e9c351a2d6e2a860e90e65020N
-
Size
379KB
-
MD5
01c2d53e9c351a2d6e2a860e90e65020
-
SHA1
42b37918747cd67c4aa444a936b290a0f43f50ad
-
SHA256
4543ded95fe0c95b86f16e6495a332486004ef721541b76d18df53cdde1f82c0
-
SHA512
f202396d59dd4863f74b61d1fd4b30418aa76ecae5c2964cd82fd2aca6ff803ddeb589af1e83144207e03f1a1bb18b12c5720ecca1a822ab353759df11b60efa
-
SSDEEP
384:XqnuO1JCHYdHz4XpfHEI6/dDEPjaVC6fMbUyFm0tyXLBI89wvuAv1mwnA3Z3BXRs:Xqnum1F6/789ujYTyLylze70wi3BEmE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01c2d53e9c351a2d6e2a860e90e65020N
Files
-
01c2d53e9c351a2d6e2a860e90e65020N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE