Behavioral task
behavioral1
Sample
ad2172deda1d26f0d76b8acc177cb161a63a91648b54908e85e079011af33a62N.exe
Resource
win7-20240903-en
General
-
Target
ad2172deda1d26f0d76b8acc177cb161a63a91648b54908e85e079011af33a62N.exe
-
Size
2.3MB
-
MD5
ec9fbb0766f5084e1fd0a1cd4522fe10
-
SHA1
96d1173f04734e74fda8858178e4e47656ae7a34
-
SHA256
ad2172deda1d26f0d76b8acc177cb161a63a91648b54908e85e079011af33a62
-
SHA512
21b6cf11d0d5688919d226d32f3c2c66fb4a846ede50b4e264e2afd45d470f908a3e0a7b271b29dd14409e004d8fdc84236d8a30e2055207e92489a1b857adee
-
SSDEEP
49152:vkPfK0BQ4GAmyjx6xd/zInt+nm0Tioy24:vIf/BQzwe/snt+nBioK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad2172deda1d26f0d76b8acc177cb161a63a91648b54908e85e079011af33a62N.exe
Files
-
ad2172deda1d26f0d76b8acc177cb161a63a91648b54908e85e079011af33a62N.exe.exe windows:8 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 516KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ