Behavioral task
behavioral1
Sample
1a899dacc312c514ca6de6f91c06fb11e68cbf0cbc393974ba51505dba8f06b3N.exe
Resource
win7-20240903-en
General
-
Target
1a899dacc312c514ca6de6f91c06fb11e68cbf0cbc393974ba51505dba8f06b3N.exe
-
Size
199KB
-
MD5
40142ad2b8b5676253426520e0943cb0
-
SHA1
0fe31d456cda5f19fdb3dae6f3593a7561919512
-
SHA256
1a899dacc312c514ca6de6f91c06fb11e68cbf0cbc393974ba51505dba8f06b3
-
SHA512
7f13679da9f5c7a3318689a48e192f8450edc824fdfb60b0ecb9ed3d222568f403c71c777b9fa4e8853d03d0e5feb4032918def7b879a0ad0a2c049e7dd5fb42
-
SSDEEP
3072:fny1oRdoROWHIjN3tj6qnv0b2UrXkbvLp:KWR+RJIjNDv0bNXkbvLp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a899dacc312c514ca6de6f91c06fb11e68cbf0cbc393974ba51505dba8f06b3N.exe
Files
-
1a899dacc312c514ca6de6f91c06fb11e68cbf0cbc393974ba51505dba8f06b3N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE