Behavioral task
behavioral1
Sample
4bf25754c396f2bcc499ff31957f62a0N.exe
Resource
win7-20240903-en
General
-
Target
4bf25754c396f2bcc499ff31957f62a0N
-
Size
227KB
-
MD5
4bf25754c396f2bcc499ff31957f62a0
-
SHA1
53b032109246d7969a3df4620eab8db1c71d5c4d
-
SHA256
27df7af6a806d9cdcae065cc599c1c04ee03cec630e00ed79b7951ec365c33ee
-
SHA512
5f05143cbee7bf5a9f9e23a66cb0972a48494d7d814cab7067867551a13cfe2440ba5660093701e0c6e5e48556f59caab69d98c6b497035395bc7cc32ec24236
-
SSDEEP
6144:jvNzUzbF68H3S8+b6uyptXIi9u/mp8saZHRD4v4M84Z9YkF/GeHNHyORQdcIKtY:jvw68XS8+d8HamysaZHRD44M3ZzF/GeW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4bf25754c396f2bcc499ff31957f62a0N
Files
-
4bf25754c396f2bcc499ff31957f62a0N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ