Behavioral task
behavioral1
Sample
f638a0c71f1b76f26f1cda8ffd43b0e0N.exe
Resource
win7-20240903-en
General
-
Target
f638a0c71f1b76f26f1cda8ffd43b0e0N
-
Size
136KB
-
MD5
f638a0c71f1b76f26f1cda8ffd43b0e0
-
SHA1
b466cc7d1c3da02e0212259c08ac36816febba53
-
SHA256
18d3d5fb80a4cb9c9a1cafb6947572063ca0b5938cda3fb265d3f10413a06bae
-
SHA512
138cd21bbdaff07502a8a271943103a481fc5033a80eab3c99d6b1d20b22dc8a84492d9fd7f2d8670645c95270cc10d652331a317c7b19220f5ee6b39d9dd2b1
-
SSDEEP
1536:V7Zf/FAxTWoJJB7i2JalYBK6OgLawnTiHAzIqxgX2eALdDDiBTvmfYetXnB7nAOS:fny1c2Ja0Kyvr/jXN1VUas
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f638a0c71f1b76f26f1cda8ffd43b0e0N
Files
-
f638a0c71f1b76f26f1cda8ffd43b0e0N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE