Behavioral task
behavioral1
Sample
fcc6a43f2efe20b621d790f6aa2955cfa967fae7a4c801fed6f95a9eb175bdd6N.exe
Resource
win7-20240903-en
General
-
Target
fcc6a43f2efe20b621d790f6aa2955cfa967fae7a4c801fed6f95a9eb175bdd6N
-
Size
378KB
-
MD5
ea9011bd199d7a58936821db13983e80
-
SHA1
033f13e5c940ede915e7b822a4cbd6f84683d694
-
SHA256
fcc6a43f2efe20b621d790f6aa2955cfa967fae7a4c801fed6f95a9eb175bdd6
-
SHA512
1442f7bdfdca8f87c4c89182a590182f86f3ba7b7f33e8ebca170093afec11614c60c1a346dedee6c896300ebd1f7d2377ddeea6af3e7f33822a1ecdb47f7592
-
SSDEEP
384:XqnuO1JCHYdHz4XpfHEI6/dDEPjaVC6fMbUyFm0tyXLBI89wvuAv1mwnA3Z3BXRB:Xqnum1F6/789ujYTyLylze70wi3BEmZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fcc6a43f2efe20b621d790f6aa2955cfa967fae7a4c801fed6f95a9eb175bdd6N
Files
-
fcc6a43f2efe20b621d790f6aa2955cfa967fae7a4c801fed6f95a9eb175bdd6N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE