Behavioral task
behavioral1
Sample
1cb85b307503e049d17ec968dc25df6d3115a980926add660cc9d2f9cb4c0415N.exe
Resource
win7-20240903-en
General
-
Target
1cb85b307503e049d17ec968dc25df6d3115a980926add660cc9d2f9cb4c0415N
-
Size
134KB
-
MD5
6714aa6b7e643970ebd0db23810463f0
-
SHA1
68453d37cc9ddff9ce38e9ac5778a937c54060cc
-
SHA256
1cb85b307503e049d17ec968dc25df6d3115a980926add660cc9d2f9cb4c0415
-
SHA512
696eb8be0127c28d544b014b8f744a2990283cc3cfea3570820d8fc0210759fc891c6289afe3761fa61c7592b54857e3b2a79568a10ec68cae4c90639d188d08
-
SSDEEP
3072:enay2tE5KIK99iMGfUSaOy9SnJUwFU+FUhFUeFUXFUqyqKRrpF6PwC:wHeEK9iMGsSaOyip
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1cb85b307503e049d17ec968dc25df6d3115a980926add660cc9d2f9cb4c0415N
Files
-
1cb85b307503e049d17ec968dc25df6d3115a980926add660cc9d2f9cb4c0415N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE