Behavioral task
behavioral1
Sample
139850d438638f972db2b8e45f7c6bac3c856fa70d6ffa1645fd7f15905d2d16N.exe
Resource
win7-20240903-en
General
-
Target
139850d438638f972db2b8e45f7c6bac3c856fa70d6ffa1645fd7f15905d2d16N
-
Size
331KB
-
MD5
1e9ae997fff06142963e3b0b220d18c0
-
SHA1
b9c0c2ee60d22bf1c477fe83bb49e12dc6ce3f65
-
SHA256
139850d438638f972db2b8e45f7c6bac3c856fa70d6ffa1645fd7f15905d2d16
-
SHA512
90b9a752e339ade52d24faa08602e6da0a4664c505fe76880c21e95187cb6ca142e24a21c7e782307198c7e98338335b63e64b897acd8566791bcd8bc1ca6fa1
-
SSDEEP
6144:Lcm4FmowdHoSHt251UriZFwfsDX2UznsaFVNJCMKAbe9:R4wFHoSHYHUrAwfMp3CD9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 139850d438638f972db2b8e45f7c6bac3c856fa70d6ffa1645fd7f15905d2d16N
Files
-
139850d438638f972db2b8e45f7c6bac3c856fa70d6ffa1645fd7f15905d2d16N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE