Behavioral task
behavioral1
Sample
b6bad164d5a8e81ee66d8cfdb4a4a212b79f7f92ab3765e7507ae16de8f07bf2N.exe
Resource
win7-20240903-en
General
-
Target
b6bad164d5a8e81ee66d8cfdb4a4a212b79f7f92ab3765e7507ae16de8f07bf2N
-
Size
57KB
-
MD5
7e3c57b8d5e3d6ab100ff49dfe7e2560
-
SHA1
21a9003166513c5869b010ff1bd78131f5a2af95
-
SHA256
b6bad164d5a8e81ee66d8cfdb4a4a212b79f7f92ab3765e7507ae16de8f07bf2
-
SHA512
864e11744dbdbacdc11ca9c18952b03824ac223e1db077d603ea927f769b5821482b89b032b7bd1c19494a4ed7264b25233e677c7d932272058abd95a4e889c5
-
SSDEEP
768:dCVMDJ5J3eXEcdgBvtYY7qk0nlfeKoS1MnKDWMDQmYZy:1J5EXEc2HHqk5KoEiAQmF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6bad164d5a8e81ee66d8cfdb4a4a212b79f7f92ab3765e7507ae16de8f07bf2N
Files
-
b6bad164d5a8e81ee66d8cfdb4a4a212b79f7f92ab3765e7507ae16de8f07bf2N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 20KB - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE