Behavioral task
behavioral1
Sample
264700a7609a551448114b98c9f866470113c603bfb4456322d6354f4e0bcfaeN.exe
Resource
win7-20240903-en
General
-
Target
264700a7609a551448114b98c9f866470113c603bfb4456322d6354f4e0bcfaeN
-
Size
120KB
-
MD5
1ebbbb801497ca6eebc3836d62a9cca0
-
SHA1
5af2100743b5d64689214766fc063847e732ecbe
-
SHA256
264700a7609a551448114b98c9f866470113c603bfb4456322d6354f4e0bcfae
-
SHA512
54a782d3e0fd0f3b38d317b2a951eb0838e12c0004071317d7df605d246a1798b2474d9c00057db5df5e69a5f5b2719e3c311e130131c97d1c334173ba3f4d65
-
SSDEEP
3072:fny1zUQzUIHSXIBlf08qySzCeSPAvA7AsAA:KxUsUlSp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 264700a7609a551448114b98c9f866470113c603bfb4456322d6354f4e0bcfaeN
Files
-
264700a7609a551448114b98c9f866470113c603bfb4456322d6354f4e0bcfaeN.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE