Behavioral task
behavioral1
Sample
d9f171cb43296871c512489d6b8eecf705d4e1a641ad8c418a32283a74e3c5f1N.exe
Resource
win7-20240903-en
General
-
Target
d9f171cb43296871c512489d6b8eecf705d4e1a641ad8c418a32283a74e3c5f1N
-
Size
126KB
-
MD5
5e2845156c43d127419adc6144affff0
-
SHA1
4e14975264817bc0fb26cb846a54314352ed7b71
-
SHA256
d9f171cb43296871c512489d6b8eecf705d4e1a641ad8c418a32283a74e3c5f1
-
SHA512
56e771196aaeb1c4f8e6a0585b3fe32ecf0ddabcfa0685af69811c59bdbd9986f52c582fca8d564c45c5f3f93a7a4a2dd21b3ea0ff90a141956c57a19594f338
-
SSDEEP
1536:V7Zf/FAxTWoJJ7TPUTOtOcvOCg7WBaMrDOt:fny1zUpmaAw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d9f171cb43296871c512489d6b8eecf705d4e1a641ad8c418a32283a74e3c5f1N
Files
-
d9f171cb43296871c512489d6b8eecf705d4e1a641ad8c418a32283a74e3c5f1N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE