Behavioral task
behavioral1
Sample
aa7d8d155294ae8ad7fd6a4ec9689b0aa1b77e396e1691c660189e2f4726696eN.exe
Resource
win7-20240903-en
General
-
Target
aa7d8d155294ae8ad7fd6a4ec9689b0aa1b77e396e1691c660189e2f4726696eN.exe
-
Size
200KB
-
MD5
2b6e3519af11daee4fa83d1a120f3560
-
SHA1
1c1ba1dcf3789b77f2fadc98da1a9051551ba138
-
SHA256
aa7d8d155294ae8ad7fd6a4ec9689b0aa1b77e396e1691c660189e2f4726696e
-
SHA512
73861610a12f4f09c27d1ccb959341e6f218663aeaba0f9ac1a6503e478aaa89948153d9473c1f5188e5429d2ec69bbdd1f11731cbca4ee46e3870d9363343d9
-
SSDEEP
3072:fny1tD33bSxtD33bS0WHIjN3tj6qnv0b2UrXkbvL9:KHD7STD7SXIjNDv0bNXkbvL9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa7d8d155294ae8ad7fd6a4ec9689b0aa1b77e396e1691c660189e2f4726696eN.exe
Files
-
aa7d8d155294ae8ad7fd6a4ec9689b0aa1b77e396e1691c660189e2f4726696eN.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE