Behavioral task
behavioral1
Sample
62922f2e75e16058e99d982e4aef1d4ab3579ee46d5f56a434f13b9ed9cababeN.exe
Resource
win7-20240903-en
General
-
Target
62922f2e75e16058e99d982e4aef1d4ab3579ee46d5f56a434f13b9ed9cababeN
-
Size
1016KB
-
MD5
b39156c5cf1add6fdeb6c9d3652de6a0
-
SHA1
2a2a77c7efdced5916c49cfbed8b3fa32eb2b5a4
-
SHA256
62922f2e75e16058e99d982e4aef1d4ab3579ee46d5f56a434f13b9ed9cababe
-
SHA512
8ff0c2a279b6e452892d71f42775c8f907a3eda9cf3a6bb989cd4d067410f139a62d8f7a595cfaafcd435e1da03b9288c809154e17cbabcd64d134ac96fc04fb
-
SSDEEP
24576:JZo575ooo75f5KI+SnmtQGbuZnqidHN9dW9gaC203Ooc8dHkC2eeo:JZo575ooo75xKEuuZnqidN9dWRW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 62922f2e75e16058e99d982e4aef1d4ab3579ee46d5f56a434f13b9ed9cababeN
Files
-
62922f2e75e16058e99d982e4aef1d4ab3579ee46d5f56a434f13b9ed9cababeN.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE