Behavioral task
behavioral1
Sample
a037f78867f6ecaa5674ed84e7b4ec00N.exe
Resource
win7-20240903-en
General
-
Target
a037f78867f6ecaa5674ed84e7b4ec00N
-
Size
2.2MB
-
MD5
a037f78867f6ecaa5674ed84e7b4ec00
-
SHA1
aa4f67d51f7bb14e5d405ea77c667149c49c12ac
-
SHA256
a643be707e959c4b3a5859d5f1af71f109b6be07b976f99be7e2b465f3c84c29
-
SHA512
d5ba214432474381a8bcaa9362ddc2574f2862178b6c40384a98ed937b432bdc8dc2b1ee315159624ed3cb1788208b3b92bfff20f38fa6c8acff72eedd7e11b0
-
SSDEEP
49152:7UQamcoRfg4f7vxCQSQx31vr/VNrdpnam+un8pn1fEdn7wntm9OxK:7UDmXfg4f7v/x3RVNrdy50n7wtm9O8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a037f78867f6ecaa5674ed84e7b4ec00N
Files
-
a037f78867f6ecaa5674ed84e7b4ec00N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 103KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE