Behavioral task
behavioral1
Sample
5105c3e54a164ae32bd8ef1c0ac42360048bb67acd87dc8115986c5f16bd9dfbN.exe
Resource
win7-20240903-en
General
-
Target
5105c3e54a164ae32bd8ef1c0ac42360048bb67acd87dc8115986c5f16bd9dfbN
-
Size
205KB
-
MD5
a7c2d373f159521bde788a5f2fcdc620
-
SHA1
03368023221a2731e72b7f52366edb98086bd539
-
SHA256
5105c3e54a164ae32bd8ef1c0ac42360048bb67acd87dc8115986c5f16bd9dfb
-
SHA512
d6450456f4a56d6b18317a147ad0cf2bcf21a612163df6a0eff72525006a2fd3d6ed6545ce60f35a88a722201f10dd21533ecae4feb3a2f1181734ef2631a5f6
-
SSDEEP
6144:8XjvIuxjs7bBCR1FHEiw/OGxDsAoGT+GklBWmryg+b:ujvI4xXFH1GxDK6+GkTWmrygK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5105c3e54a164ae32bd8ef1c0ac42360048bb67acd87dc8115986c5f16bd9dfbN
Files
-
5105c3e54a164ae32bd8ef1c0ac42360048bb67acd87dc8115986c5f16bd9dfbN.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 194KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE