Behavioral task
behavioral1
Sample
67e13ed18252ca06eb46c3b7eac63e890934fa26662e0f994f48ed6cb69a17a7N.exe
Resource
win7-20240708-en
General
-
Target
67e13ed18252ca06eb46c3b7eac63e890934fa26662e0f994f48ed6cb69a17a7N
-
Size
150KB
-
MD5
876e63e390e92bb0f74dfba5c8049a60
-
SHA1
e30840e38bcea66af53a2bfd41d5c01048f8661d
-
SHA256
67e13ed18252ca06eb46c3b7eac63e890934fa26662e0f994f48ed6cb69a17a7
-
SHA512
b80a1c56775a13ce9888854bfc68fd40cec457ef8a8634c9a9ab2db00d8123c78e597a4e0f94f918d1ea390893b5b4312e324bc2f78eee80626168b1845bb8bf
-
SSDEEP
3072:fny1zI+h/YI+h/3WHIjN3tj6qnv0b2UrXkbvLu:K++hv+hEIjNDv0bNXkbvLu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 67e13ed18252ca06eb46c3b7eac63e890934fa26662e0f994f48ed6cb69a17a7N
Files
-
67e13ed18252ca06eb46c3b7eac63e890934fa26662e0f994f48ed6cb69a17a7N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE