Behavioral task
behavioral1
Sample
aaba80c86ce0bb377c67c1a309e4b7ff77b728cee9b35c9b8a8276160bce2a86N.exe
Resource
win7-20240903-en
General
-
Target
aaba80c86ce0bb377c67c1a309e4b7ff77b728cee9b35c9b8a8276160bce2a86N.exe
-
Size
124KB
-
MD5
f98654f0186e08ca5ffb50db501e47f0
-
SHA1
eaf73c05618bc2edaec8da4aef6dbb5e4935288b
-
SHA256
aaba80c86ce0bb377c67c1a309e4b7ff77b728cee9b35c9b8a8276160bce2a86
-
SHA512
122a8b90f93315884401132ede711c5332f59a71e578a65ce7b66b6d84b0b77cf63061bfb0b41eced50249be7015221ebe23ebe0e72edfe6b79e9c0074d9ed35
-
SSDEEP
1536:V7Zf/FAxTWoJJ7TH6/lPdA3NyaM62ot2oxQWe:fny1oPdA9yaMDT2e
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aaba80c86ce0bb377c67c1a309e4b7ff77b728cee9b35c9b8a8276160bce2a86N.exe
Files
-
aaba80c86ce0bb377c67c1a309e4b7ff77b728cee9b35c9b8a8276160bce2a86N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE