Behavioral task
behavioral1
Sample
4020158a22a92638f5d11d154315be7d2de1b5da22052772e2785ba3796e3185N.exe
Resource
win7-20240729-en
General
-
Target
4020158a22a92638f5d11d154315be7d2de1b5da22052772e2785ba3796e3185N
-
Size
219KB
-
MD5
b2cdb06d8495cac4f5db7e358aefc560
-
SHA1
9117f73239d6916975754497145865e7a6d386e3
-
SHA256
4020158a22a92638f5d11d154315be7d2de1b5da22052772e2785ba3796e3185
-
SHA512
900b216053470c416d58c761ce6c05a8c8e9990bb49b09e2e9c5385f5418e5148c748c915d96cb7cf57c680fc9ba948cd602eafe777c18b04ba3682f118d1893
-
SSDEEP
1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8asUsJOLKc/xJtLJtTGHOTWn1++PJHJXU:fnyiQSohsUsUK/OQSohsUsUK/OaiFRG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4020158a22a92638f5d11d154315be7d2de1b5da22052772e2785ba3796e3185N
Files
-
4020158a22a92638f5d11d154315be7d2de1b5da22052772e2785ba3796e3185N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE