Behavioral task
behavioral1
Sample
592c4957bd7b0db3027f4ec3f495de3a0a295669aaf02ccafb89942bf7430152N.exe
Resource
win7-20240903-en
General
-
Target
592c4957bd7b0db3027f4ec3f495de3a0a295669aaf02ccafb89942bf7430152N
-
Size
97KB
-
MD5
087a0de3d3a80653941ea918b7062910
-
SHA1
57b8d795c582cd35cff3e3bbe8f620bb77f42080
-
SHA256
592c4957bd7b0db3027f4ec3f495de3a0a295669aaf02ccafb89942bf7430152
-
SHA512
9cf08c725433d03a8af6c4c1f915af20c3ab215859d83946e8d2bcaf7d9571bc3d8d127530aa2a2d788f77ff0e8ff2a798c9f846eeb94024cbacb43b7495f98a
-
SSDEEP
1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8zxY5jVBChFd7naVF5sQwyaq6ChFd7naX:fnyiQSox54
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 592c4957bd7b0db3027f4ec3f495de3a0a295669aaf02ccafb89942bf7430152N
Files
-
592c4957bd7b0db3027f4ec3f495de3a0a295669aaf02ccafb89942bf7430152N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE