Behavioral task
behavioral1
Sample
841c14ade407a72bb4c96790afc6662deee7c2413eb39f45f54b793442126212N.exe
Resource
win7-20240903-en
General
-
Target
841c14ade407a72bb4c96790afc6662deee7c2413eb39f45f54b793442126212N.exe
-
Size
132KB
-
MD5
800888668ded75eb3d306b50b1cfb040
-
SHA1
9ba709a3ca4bcab9d61a34bb37b2a1074dde9f72
-
SHA256
841c14ade407a72bb4c96790afc6662deee7c2413eb39f45f54b793442126212
-
SHA512
1b44eb31f3aa44be7ab38cff2684a8b9690e4bbd154eaf51a6c91a3f8bc21e539c8bb99109f908735abdfb5eb35a9b7f4b0a57d523ae2997e10eb390fa096fd6
-
SSDEEP
3072:fny2osZSnJUwFU+FUhFUeFUXFUqybtriLQFzwK7:KyD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 841c14ade407a72bb4c96790afc6662deee7c2413eb39f45f54b793442126212N.exe
Files
-
841c14ade407a72bb4c96790afc6662deee7c2413eb39f45f54b793442126212N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE