Behavioral task
behavioral1
Sample
17aa2a43ddca4144d9d61bd63727ddc37c8c07650269358f552b83abaf237661N.exe
Resource
win10v2004-20240802-en
General
-
Target
17aa2a43ddca4144d9d61bd63727ddc37c8c07650269358f552b83abaf237661N
-
Size
436KB
-
MD5
70918a91a4678c2973e8d230199b8cb0
-
SHA1
be8400f3f12781011994cb0b220ba37f3258f52d
-
SHA256
17aa2a43ddca4144d9d61bd63727ddc37c8c07650269358f552b83abaf237661
-
SHA512
2afea8d18ffbafff11d161f759f87fd497c374620bb571f26c694f55acb92cb38dfe3c81141a800e8d4aedd3f1fd7b593798e24941a25e6b725d70cca50aa448
-
SSDEEP
6144:FQz6R5TuJSMjFqW770kdNwB8kv9mYfiNN:iz6R5TuwQqW7wkv/G/k
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17aa2a43ddca4144d9d61bd63727ddc37c8c07650269358f552b83abaf237661N
Files
-
17aa2a43ddca4144d9d61bd63727ddc37c8c07650269358f552b83abaf237661N.exe windows:10 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rmnet Size: 252KB - Virtual size: 252KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE