Behavioral task
behavioral1
Sample
d12b24ffa21c104cb012d28eb2889f8ae67b8a334e57037d356b41777a1fd3feN.exe
Resource
win7-20240903-en
General
-
Target
d12b24ffa21c104cb012d28eb2889f8ae67b8a334e57037d356b41777a1fd3feN.exe
-
Size
53KB
-
MD5
96fc321f2579924b4c2dfac7e4382890
-
SHA1
be8d8226f49a8bef6dc125f508f6286186b2f6cc
-
SHA256
d12b24ffa21c104cb012d28eb2889f8ae67b8a334e57037d356b41777a1fd3fe
-
SHA512
12997d810bac037be69cc60654e467a06a16b0f949f1f0070673d0f39dbda68a95757ab4f2ccebeade3b18eaf4e8040644f31ccf39bec1eb28b830173e15bb27
-
SSDEEP
768:n8eRH+MlFh0pXrL4i6sh7iQroCHmmbk2ElUVY:n9l+Gi6sh7iQroCLMB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d12b24ffa21c104cb012d28eb2889f8ae67b8a334e57037d356b41777a1fd3feN.exe
Files
-
d12b24ffa21c104cb012d28eb2889f8ae67b8a334e57037d356b41777a1fd3feN.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 20KB - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE