Behavioral task
behavioral1
Sample
11c73690db588531915589faff4a3c3c57afeacb055e492c36fbea81bc09452aN.exe
Resource
win7-20240903-en
General
-
Target
11c73690db588531915589faff4a3c3c57afeacb055e492c36fbea81bc09452aN
-
Size
784KB
-
MD5
cb7e2fe3f48bdabc0701f2f007fa8fb0
-
SHA1
2121c24de58e2a978b671a413ea7637c1997ce4a
-
SHA256
11c73690db588531915589faff4a3c3c57afeacb055e492c36fbea81bc09452a
-
SHA512
f26d2fa9e889bfdb165318c47d671b27b21e12c3596958f99bc897ef0821512869271d87a733ca481b8b9d1b11daf5db1fb5053308d13dcfdaf7bde2d8aa936f
-
SSDEEP
12288:UmpLhf9NJy5d/Xrt877abxlXwBh1CiD5ow9R3qf3BVgxCRo3oDsOKOEKqgR7G1ym:NpLhXSTb2h1Cinqf3BV5oV3OAYJBu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11c73690db588531915589faff4a3c3c57afeacb055e492c36fbea81bc09452aN
Files
-
11c73690db588531915589faff4a3c3c57afeacb055e492c36fbea81bc09452aN.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE