Behavioral task
behavioral1
Sample
b7da99c581a4fc99cc1fd53071748ea1e4149126233b09b4ab2d4bb88fe2bdc8N.exe
Resource
win7-20240903-en
General
-
Target
b7da99c581a4fc99cc1fd53071748ea1e4149126233b09b4ab2d4bb88fe2bdc8N
-
Size
60KB
-
MD5
01b72c83648ffdf2be11637ca8e66e20
-
SHA1
6cca53c3b81473ca474a342859868e38eb450c5f
-
SHA256
b7da99c581a4fc99cc1fd53071748ea1e4149126233b09b4ab2d4bb88fe2bdc8
-
SHA512
984c4ee8ac35e42368efe3e21c413374284155e1f3f398343d640c7e6dde3fe6373e4ad338d0171df97377f865374011ed30a1cb53d117e59db8b9f3a6b92d1d
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjyJJXGitPsqAJUqAJMe9rJiuf:V7Zf/FAxTWoJJXtPHr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b7da99c581a4fc99cc1fd53071748ea1e4149126233b09b4ab2d4bb88fe2bdc8N
Files
-
b7da99c581a4fc99cc1fd53071748ea1e4149126233b09b4ab2d4bb88fe2bdc8N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE