Behavioral task
behavioral1
Sample
c4a340832417c6cff39d5e60a6ad5c9fc3e7f51eb97e80775d80a9dbc9aae514N.exe
Resource
win7-20240903-en
General
-
Target
c4a340832417c6cff39d5e60a6ad5c9fc3e7f51eb97e80775d80a9dbc9aae514N
-
Size
54KB
-
MD5
8af046af55007f1abfc21aa3ab484030
-
SHA1
d196904c1ffc0dd8836fb463d3c373b54d212bb8
-
SHA256
c4a340832417c6cff39d5e60a6ad5c9fc3e7f51eb97e80775d80a9dbc9aae514
-
SHA512
67e9ccfc2eac6e6b65597a5b330a389bf552946d938f0055bcf6253119faa10d89eb892c11467b7898b7dde1b3e112ca70a14cd126b7e38cf50ff6268d072296
-
SSDEEP
1536:AsoRk1GUrMzK3FswMpnouy8ovX7XLUNmAVqxh22zkZ5Zr0EUB:AUBuw+outU7XLUNmKqVz0E
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c4a340832417c6cff39d5e60a6ad5c9fc3e7f51eb97e80775d80a9dbc9aae514N
Files
-
c4a340832417c6cff39d5e60a6ad5c9fc3e7f51eb97e80775d80a9dbc9aae514N.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE