Behavioral task
behavioral1
Sample
be05a407ad098b6d726d7905ff3386ee410a0ce3e37ca15e85345a2a266d2fd1N.exe
Resource
win7-20240729-en
General
-
Target
be05a407ad098b6d726d7905ff3386ee410a0ce3e37ca15e85345a2a266d2fd1N
-
Size
745KB
-
MD5
841e1c60888f8204817a460f04d40080
-
SHA1
690b5a99db2f97913ef129b2e47ac6067aba6cc2
-
SHA256
be05a407ad098b6d726d7905ff3386ee410a0ce3e37ca15e85345a2a266d2fd1
-
SHA512
4f85803335ed34f7bb48aee791ea2d2245170a34c8b049d6ff1a37d7452e48e2c017e9b7d4cf6e4779733f823591e6ca034b1ef642f260c7739ea8b5826d9df5
-
SSDEEP
12288:UTevrIUMR/UB7v14t677Vut+XG1ykwM+hGxlc7:UTK1MR8Bx4tSVuUXG4fM+hGQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource be05a407ad098b6d726d7905ff3386ee410a0ce3e37ca15e85345a2a266d2fd1N
Files
-
be05a407ad098b6d726d7905ff3386ee410a0ce3e37ca15e85345a2a266d2fd1N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE