Behavioral task
behavioral1
Sample
5da42cadf8c3f8359482609178266040N.exe
Resource
win7-20240903-en
General
-
Target
5da42cadf8c3f8359482609178266040N.exe
-
Size
71KB
-
MD5
5da42cadf8c3f8359482609178266040
-
SHA1
9c649f48d3f12596dd3e9abc528ae139b08309ae
-
SHA256
f66838cae0b06a91eecfe6623a884af09664d17e84059abd145c1358751e90f1
-
SHA512
94250d0690ff701d54c284495c3e4b6bac9b01f2c515e02d631907b643e83cd5c234b2057a902bfdb3671884c319f3e4fa5e33a0aae9274a3e6cff6e2867560e
-
SSDEEP
1536:kvQBeOGtrYS3srx93UBWfwC6Ggnouy8p5yAXNlIQldqHiF48u9qllY:khOmTsF93UYfwC6GIoutpYcvldKiF4Ws
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5da42cadf8c3f8359482609178266040N.exe
Files
-
5da42cadf8c3f8359482609178266040N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE