Behavioral task
behavioral1
Sample
c884fa40cd046468433a360547ba37785e0dfe7915989522f3fab46586c59d5bN.exe
Resource
win7-20240903-en
General
-
Target
c884fa40cd046468433a360547ba37785e0dfe7915989522f3fab46586c59d5bN
-
Size
426KB
-
MD5
fc572576cdf140c15bea617963d7b380
-
SHA1
f7de35e07b5ec654ee706dcfc5a880b53bf5af9c
-
SHA256
c884fa40cd046468433a360547ba37785e0dfe7915989522f3fab46586c59d5b
-
SHA512
77e7c64454d61f55ec7168514cdf0b2d1678697d51af068f003fd1fc302d03b47c30362aba55509b363d0a653e78441ee2d47a187c3a80def4ed2dec723511e1
-
SSDEEP
12288:OxnD137H5vEdIu1jDe86E3gISF8DopGwS:GZ7HydI4veTIgWNd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c884fa40cd046468433a360547ba37785e0dfe7915989522f3fab46586c59d5bN
Files
-
c884fa40cd046468433a360547ba37785e0dfe7915989522f3fab46586c59d5bN.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 628KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 356KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE