Behavioral task
behavioral1
Sample
9425950536d5b9e19f87066696da009c13c31d6afa0f36830a82849e6bf08e38N.exe
Resource
win7-20240708-en
General
-
Target
9425950536d5b9e19f87066696da009c13c31d6afa0f36830a82849e6bf08e38N
-
Size
96KB
-
MD5
6b3d104f960a8ef19c5d58299fcb16b0
-
SHA1
85a14530fee5e64ae0792731f8a91b7777b590f7
-
SHA256
9425950536d5b9e19f87066696da009c13c31d6afa0f36830a82849e6bf08e38
-
SHA512
699421de3d5f6d1dfa0d7a0381de4eba1e81652aa443a317b8e48dfb7eb07af04be864f6252c6890ddac8c62bda2904e24ea60a6e7e443f75fc1b581715e01a9
-
SSDEEP
3072:8hOmTsF93UYfwC6GIout0fmCiiiXA6mzgk:8cm4FmowdHoSgWrXUgk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9425950536d5b9e19f87066696da009c13c31d6afa0f36830a82849e6bf08e38N
Files
-
9425950536d5b9e19f87066696da009c13c31d6afa0f36830a82849e6bf08e38N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE