Behavioral task
behavioral1
Sample
01bd66aea2e4b1b70b5769bea5c6331441add375843c5e532ec8bda4e7fae989N.exe
Resource
win7-20240903-en
General
-
Target
01bd66aea2e4b1b70b5769bea5c6331441add375843c5e532ec8bda4e7fae989N
-
Size
63KB
-
MD5
785ae2aef1529ba562a0f683bf9b2e70
-
SHA1
8d5b46cb1e90fb3a4565b17c9c77abc3591c53b9
-
SHA256
01bd66aea2e4b1b70b5769bea5c6331441add375843c5e532ec8bda4e7fae989
-
SHA512
6f0660a58c4db6582f11f358267aa8f4677a490209c82a266f7d105e03c2bdca4a30a3a9a3e789271a2b32ff6ff0bd3b81947c2544f114b104a9e7db6d6ed533
-
SSDEEP
768:r8eRH+MlFh0pDpuJ84WEi+U6sh7iQroCHmyf+RjFBSuB2XpfsPpzSd3fX:r9l+W8xFt6sh7iQroCoRB0u0sPpzStv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01bd66aea2e4b1b70b5769bea5c6331441add375843c5e532ec8bda4e7fae989N
Files
-
01bd66aea2e4b1b70b5769bea5c6331441add375843c5e532ec8bda4e7fae989N.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 20KB - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE