Behavioral task
behavioral1
Sample
5857908c46802d26d28308275b3f0540N.exe
Resource
win7-20240903-en
General
-
Target
5857908c46802d26d28308275b3f0540N
-
Size
2.2MB
-
MD5
5857908c46802d26d28308275b3f0540
-
SHA1
3f9d1ac52727b9a2c5c4f7cf810625e0b3ab1ad0
-
SHA256
311012bf301db6d2f41bc9e65e462ba6a47610056fbac6a04058b6650ae50529
-
SHA512
459bdabadfdbff2c088d393a67b0c6c7df81bb91e2da90ba327303d41c63de994eb10fcfed5964c7b69d727241525b74aee30ca7bbdd029c8490db065747ff7a
-
SSDEEP
49152:wY/WhVtqUs7VjZcN+9zWFULG+aLP6hUMtOzP5MN33R41ULvigX+fcN+9zWFULG+t:wY/WXt7eVjaA9zyULG+aLP3MtSP5MN3y
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5857908c46802d26d28308275b3f0540N
Files
-
5857908c46802d26d28308275b3f0540N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE