Behavioral task
behavioral1
Sample
79bb48ad8f2c9ff2dd1b398a2080990136ec5b5186de25a01fd2373ecfa89ef2N.exe
Resource
win7-20240903-en
General
-
Target
79bb48ad8f2c9ff2dd1b398a2080990136ec5b5186de25a01fd2373ecfa89ef2N
-
Size
435KB
-
MD5
bb12c87bfcaf74a7f891aea3b4a89f30
-
SHA1
06fbe0ff97e561b47a6150aed1786d94d988b01b
-
SHA256
79bb48ad8f2c9ff2dd1b398a2080990136ec5b5186de25a01fd2373ecfa89ef2
-
SHA512
e077c9ddbce20377d20600b80261166fd509e6593b1177b2fa44feb7cbf26ef8237a4c2ef44e6ee7a9a9ce625f17182e82580c0f58bfc615aa6c883fe46cc062
-
SSDEEP
12288:PTf1aDMWvl/SaVcHSRhS5pVEFHdDne9OvlFCo:PRaDjvlqaVw2+U9D5Hf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 79bb48ad8f2c9ff2dd1b398a2080990136ec5b5186de25a01fd2373ecfa89ef2N
Files
-
79bb48ad8f2c9ff2dd1b398a2080990136ec5b5186de25a01fd2373ecfa89ef2N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 824KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 405KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE