Behavioral task
behavioral1
Sample
cecdfd644fd2a8478f1e0c4b775b076edc2c4d41f0b7a0fa3f3fc3cbd042df74N.exe
Resource
win7-20240729-en
General
-
Target
cecdfd644fd2a8478f1e0c4b775b076edc2c4d41f0b7a0fa3f3fc3cbd042df74N
-
Size
52KB
-
MD5
079d67abf2344bc5150a29fc0bd24560
-
SHA1
e038b4c043ce4f315a0bebd27145b307ea79cfb3
-
SHA256
cecdfd644fd2a8478f1e0c4b775b076edc2c4d41f0b7a0fa3f3fc3cbd042df74
-
SHA512
a0466e470a2b70c20b5f64f5e04158332c44e88d12417c35dd09f425c6b9a374b642f2a126099123612e072705d6c9d1a81006a1673863f032c3e16a461570ae
-
SSDEEP
768:n8eRH+MlFh0pXrL4i6sh7iQroCHmmbk2ElUYh:n9l+Gi6sh7iQroCLMf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cecdfd644fd2a8478f1e0c4b775b076edc2c4d41f0b7a0fa3f3fc3cbd042df74N
Files
-
cecdfd644fd2a8478f1e0c4b775b076edc2c4d41f0b7a0fa3f3fc3cbd042df74N.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 20KB - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE