Behavioral task
behavioral1
Sample
4d0132515f01179ea7eb7657ce2bfd6ab45c9d44d19fc70726bdaddc9ca5acd2N.exe
Resource
win7-20240903-en
General
-
Target
4d0132515f01179ea7eb7657ce2bfd6ab45c9d44d19fc70726bdaddc9ca5acd2N.exe
-
Size
142KB
-
MD5
ebea952cbecdcf129795e68feb0b27b0
-
SHA1
d6d99b879572b47dc7917f57a7a6e9ed89dce9c6
-
SHA256
4d0132515f01179ea7eb7657ce2bfd6ab45c9d44d19fc70726bdaddc9ca5acd2
-
SHA512
68d06a91c7fd453df73e8230f07ffbf612fae9e570be6f9955ef28a60e48e242f7d7c04367d08552fefb3d7835eb80e75de39c93e1b068bb7d966a43921b5d56
-
SSDEEP
3072:fny1oRCosZSnJUwFU+FUhFUeFUXFUqybtriLQFzwKM:KWR+0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d0132515f01179ea7eb7657ce2bfd6ab45c9d44d19fc70726bdaddc9ca5acd2N.exe
Files
-
4d0132515f01179ea7eb7657ce2bfd6ab45c9d44d19fc70726bdaddc9ca5acd2N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE