Behavioral task
behavioral1
Sample
fdd0b3bf48a55607ffdcf634b26f9670N.exe
Resource
win7-20240903-en
General
-
Target
fdd0b3bf48a55607ffdcf634b26f9670N
-
Size
343KB
-
MD5
fdd0b3bf48a55607ffdcf634b26f9670
-
SHA1
c43eddd238c5467c38d3fa998052cacffe3af71a
-
SHA256
61bede47eb3aa2e1bb0468c2c1ca4b5e9fb7100d4eb6156e6d7c3d614debff39
-
SHA512
ec0500a330dd56a70227092d065e80265e883470a5c3c3687e312e8a8591d38d901711df9d39a931cdc0dd07ca3b07ee6b436efd07736fc3f51ea54ee706ee3d
-
SSDEEP
6144:Lcm4FmowdHoSEYW5fNZWB5hFfci3Add4kGYAC:R4wFHoS3WXZshJX2VGdC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fdd0b3bf48a55607ffdcf634b26f9670N
Files
-
fdd0b3bf48a55607ffdcf634b26f9670N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE