Behavioral task
behavioral1
Sample
fbfaed68c507dc3acc83edaed848bc3a93d2c5b3e50ba7e59fa648117fc1304aN.exe
Resource
win7-20240903-en
General
-
Target
fbfaed68c507dc3acc83edaed848bc3a93d2c5b3e50ba7e59fa648117fc1304aN
-
Size
7.5MB
-
MD5
36945831d5a217e020774d27b84dcee0
-
SHA1
d72e4366684b62edd1aa7232d1b5944d56c44a13
-
SHA256
fbfaed68c507dc3acc83edaed848bc3a93d2c5b3e50ba7e59fa648117fc1304a
-
SHA512
123453cac71973caa8f09745d4b77577760d7c5fb6f5a4a45e79fd69d8b0e892c04143848000cdfd0c6792143942917f5479ff247e41f79a8a3c4b81c0cf6446
-
SSDEEP
196608:gZZr6PpsXLc6WdwZlPKWQcnX7aXQ7RW9ceScsPa9Ew3Sd:gZB6xsDWdwZ3aQ7RWC6sy3Sd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fbfaed68c507dc3acc83edaed848bc3a93d2c5b3e50ba7e59fa648117fc1304aN
Files
-
fbfaed68c507dc3acc83edaed848bc3a93d2c5b3e50ba7e59fa648117fc1304aN.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE