Behavioral task
behavioral1
Sample
c57a55649737ba91064c7bc51c2506ae8977e2ead87071ce34763088af981e2eN.exe
Resource
win7-20240903-en
General
-
Target
c57a55649737ba91064c7bc51c2506ae8977e2ead87071ce34763088af981e2eN
-
Size
98KB
-
MD5
f65c993dc37fe0c86d1483c754ed0c20
-
SHA1
ab3ca44b5e5c7ff84575188215675619f8a6b97c
-
SHA256
c57a55649737ba91064c7bc51c2506ae8977e2ead87071ce34763088af981e2e
-
SHA512
8747cab04d82a2801e110c8c195f2671ca4738851d91e2eda1ab510dce0ad99da48ace42815a1ca59b1a996d2fb01b94b74fe057223d035485efd9d757adf2a1
-
SSDEEP
768:a7BlpyqaFAK65euBT37CPKKDm7EJJ1EXBwzEXBwdcMcI9SBo7BohZQZzkaVhXVSn:a7ZyqaFAxTWbJJ7TDNkiwQpGyDO7L
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c57a55649737ba91064c7bc51c2506ae8977e2ead87071ce34763088af981e2eN
Files
-
c57a55649737ba91064c7bc51c2506ae8977e2ead87071ce34763088af981e2eN.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE