Behavioral task
behavioral1
Sample
0938c8d45a28a65c1d18b3c0ce31aa2c0b8492c0a9e4fac4f6aa282346d322b7N.exe
Resource
win7-20240903-en
General
-
Target
0938c8d45a28a65c1d18b3c0ce31aa2c0b8492c0a9e4fac4f6aa282346d322b7N.exe
-
Size
129KB
-
MD5
14b3a6ebf628e77026fddebe07ca5a20
-
SHA1
e105f86ad663d908b3c562e370264aa4f4215dfd
-
SHA256
0938c8d45a28a65c1d18b3c0ce31aa2c0b8492c0a9e4fac4f6aa282346d322b7
-
SHA512
aa6e842a5e647f29011d64b192e7b657034508aa0d3d12376a485ab6142841fe13fcc0648566bf859d172c48368ce46f406965cf82a1a2e61dcb4aac6bea49bf
-
SSDEEP
1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8+g9VyjVysWOaERT+G9v/8:fnyiQSo3WOaiFR8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0938c8d45a28a65c1d18b3c0ce31aa2c0b8492c0a9e4fac4f6aa282346d322b7N.exe
Files
-
0938c8d45a28a65c1d18b3c0ce31aa2c0b8492c0a9e4fac4f6aa282346d322b7N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE