Behavioral task
behavioral1
Sample
a6e25ed7d6444b948ec0f2ca56821d44b59962f8ec96dd6b27b019d7315f702cN.exe
Resource
win7-20240903-en
General
-
Target
a6e25ed7d6444b948ec0f2ca56821d44b59962f8ec96dd6b27b019d7315f702cN
-
Size
32KB
-
MD5
745b73de58e9ec8a615ba97faeabb6b0
-
SHA1
2c8744bdcace38401e656408bbce1fda5678b9be
-
SHA256
a6e25ed7d6444b948ec0f2ca56821d44b59962f8ec96dd6b27b019d7315f702c
-
SHA512
974d349149bd38a744b4d4c11b55c249da64e8efc768a06065e4f0562ed16eb58e325a618827e123663a65806384c160fb226855e350f79037cb582dc36bf949
-
SSDEEP
384:s4/UCC8VcAaYRiUiiV7fhqc45u8gNrLRnFKE7phaNJawcudoD7Ug5EL:sUUC151Npquv3RnFKE7pUnbcuyD7UCE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a6e25ed7d6444b948ec0f2ca56821d44b59962f8ec96dd6b27b019d7315f702cN
Files
-
a6e25ed7d6444b948ec0f2ca56821d44b59962f8ec96dd6b27b019d7315f702cN.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE