Behavioral task
behavioral1
Sample
64c93f3bde69be7803e2e6e27f644240N.exe
Resource
win7-20240708-en
General
-
Target
64c93f3bde69be7803e2e6e27f644240N.exe
-
Size
808KB
-
MD5
64c93f3bde69be7803e2e6e27f644240
-
SHA1
0a420875c6ac133fc5e49e21587e3790218aa308
-
SHA256
47ecd836760707c0a601bd735b41577d0a6e35d8a64428c8e379b4ac5ee95e18
-
SHA512
26c685fa510fd8c41a8126a8bae0dddeabc10388d83a312c5e806e5fbd39bf0bcf5865af02facce0520d3b1b81e3ad1f6436a3e3a6f4e90555f196be879ebe38
-
SSDEEP
6144:Mxdi5Onz2qgmB9Dwlnxdi5Onz2qgmB9Dw:M3iEnztgmB9cln3iEnztgmB9c
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64c93f3bde69be7803e2e6e27f644240N.exe
Files
-
64c93f3bde69be7803e2e6e27f644240N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 240KB - Virtual size: 240KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 520KB - Virtual size: 520KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE