Behavioral task
behavioral1
Sample
b6d12592b3a23f76ea07a819a4730b4d4788b67cba5dca0f87df7023ace13e57N.exe
Resource
win7-20240704-en
General
-
Target
b6d12592b3a23f76ea07a819a4730b4d4788b67cba5dca0f87df7023ace13e57N.exe
-
Size
173KB
-
MD5
13dbe79cff936253f7091aeaaa59ec10
-
SHA1
926ca563545a8c2007289d4538b01fe2be8f0d36
-
SHA256
b6d12592b3a23f76ea07a819a4730b4d4788b67cba5dca0f87df7023ace13e57
-
SHA512
49e7f6c8e14fc46e1b5bd4a2cafbae9af9331d77bc3ecaf3fbe79ac37679308d0f7dd22e13af083bbd847bcfdd3c8e298caf1ea30add6a9393d9c15e4ca0ae91
-
SSDEEP
1536:V7Zf/FAxTWoJJ7TTQoQSe4pWHlPEXZzjUq3th5f6utM5vLNinVmWvMu0b2UdpXk2:fny1oRSVWHIjN3tj6qnv0b2UrXkbvLG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6d12592b3a23f76ea07a819a4730b4d4788b67cba5dca0f87df7023ace13e57N.exe
Files
-
b6d12592b3a23f76ea07a819a4730b4d4788b67cba5dca0f87df7023ace13e57N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE