Behavioral task
behavioral1
Sample
497d04b5ea79bddac9a54dda5ba9711ce6653acf6c6c8831993f18b6282966f2N.exe
Resource
win7-20240704-en
General
-
Target
497d04b5ea79bddac9a54dda5ba9711ce6653acf6c6c8831993f18b6282966f2N
-
Size
5.4MB
-
MD5
0a45a30036f33017096fb564705a9100
-
SHA1
aede314e46087fb0c572e7c02c9176dccd5696d0
-
SHA256
497d04b5ea79bddac9a54dda5ba9711ce6653acf6c6c8831993f18b6282966f2
-
SHA512
12afdac4994644859be1bc596832ab16bf1f0073b2ded25ae3c33bd13e73ddfaf6931dd3a8869cc6410540205414b06637417875c2908cb3370b4b1d3b62001b
-
SSDEEP
98304:IVvTPxZ3iUKD9cakc7uRHBLLMecakcr6VwL/Nx6xcakc7uRHBLL0q5oXxiNlFxkr:ev7xZ3sD9dlqRHBLgedlr/7jQdlqRHB+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 497d04b5ea79bddac9a54dda5ba9711ce6653acf6c6c8831993f18b6282966f2N
Files
-
497d04b5ea79bddac9a54dda5ba9711ce6653acf6c6c8831993f18b6282966f2N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE