Behavioral task
behavioral1
Sample
af4bf8f24c00a116a775961012dedf18438d84857465aad09cbbed35fd7da9c9N.exe
Resource
win7-20240903-en
General
-
Target
af4bf8f24c00a116a775961012dedf18438d84857465aad09cbbed35fd7da9c9N
-
Size
8.2MB
-
MD5
79fee6691b077bf8a704607dd30a8f00
-
SHA1
2b599fd7a1672cb0b8253271a6af4bd2d5fce48f
-
SHA256
af4bf8f24c00a116a775961012dedf18438d84857465aad09cbbed35fd7da9c9
-
SHA512
30ebdde2e136566c79c42cda0c2974967fbb85fd1f30e64b76d4dc07665cc2f6f573b557a3b17058426aa062dca93ef669f49d7ca0393a8e3f8f6e5ed4590c89
-
SSDEEP
24576:q+hv+hJS+hv+hJfkRODkjZonUfPIN+vIojv6LBJecwQrX3DDT:KifiODAZX8JecwQjT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af4bf8f24c00a116a775961012dedf18438d84857465aad09cbbed35fd7da9c9N
Files
-
af4bf8f24c00a116a775961012dedf18438d84857465aad09cbbed35fd7da9c9N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE