Behavioral task
behavioral1
Sample
9514ff0503b455157eaa34838731de83080259671145c593b9b685218928f398N.exe
Resource
win7-20240903-en
General
-
Target
9514ff0503b455157eaa34838731de83080259671145c593b9b685218928f398N
-
Size
152KB
-
MD5
b361c7914880df1c57140e31c7f86ca0
-
SHA1
cb841a3ca46d98ef8d2e4e161bfb6df5a9a7fd89
-
SHA256
9514ff0503b455157eaa34838731de83080259671145c593b9b685218928f398
-
SHA512
967898940c38932669c47c5c1f78c658f8ad485aae127de8110f72f7c9b8ae775006e0077c4f811769ed296b425c8fa1e8185f174864ed7383501efeae784179
-
SSDEEP
1536:V7Zf/FAxTWoJJ7T2StuSta4pWHlPEXZzjUq3th5f6utM5vLNinVmWvMu0b2UdpXU:fny1a+u+5WHIjN3tj6qnv0b2UrXkbvLx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9514ff0503b455157eaa34838731de83080259671145c593b9b685218928f398N
Files
-
9514ff0503b455157eaa34838731de83080259671145c593b9b685218928f398N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE