Behavioral task
behavioral1
Sample
23f931a307db770fddfa80761635d5ad1a03bffc2d222859529851c0f42a9c7eN.exe
Resource
win7-20240903-en
General
-
Target
23f931a307db770fddfa80761635d5ad1a03bffc2d222859529851c0f42a9c7eN
-
Size
235KB
-
MD5
a3e782f667ed7ab399fe55225038f050
-
SHA1
d55e7f3f8cc479599e59ba28940ec2b6133f36ef
-
SHA256
23f931a307db770fddfa80761635d5ad1a03bffc2d222859529851c0f42a9c7e
-
SHA512
597075062f276a4bf5cc70c35be57dba82b13a47dd9b90bd6d574e3dc67ef7b525a15c801803bcb461cd6a12699db4d3ba68c8e7c991245b90f07451615a9bb7
-
SSDEEP
6144:6lez2ssftlVN+zBfGrSWm+omDAgQsSygGG2S+:H6silNoGSJ+omDAdsWGLS+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 23f931a307db770fddfa80761635d5ad1a03bffc2d222859529851c0f42a9c7eN
Files
-
23f931a307db770fddfa80761635d5ad1a03bffc2d222859529851c0f42a9c7eN.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 199KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pe2 Size: 29B - Virtual size: 29B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ