Behavioral task
behavioral1
Sample
40bc94e5e5e8a730bb5870025af52ba9fbe41bf1887a64f0d99ce9bba341ed8bN.exe
Resource
win7-20240903-en
General
-
Target
40bc94e5e5e8a730bb5870025af52ba9fbe41bf1887a64f0d99ce9bba341ed8bN
-
Size
55KB
-
MD5
a0601e66b714781497df0bc37c2b4460
-
SHA1
21c5654ec1ed1028bb618bdf941b13ea7a4915c2
-
SHA256
40bc94e5e5e8a730bb5870025af52ba9fbe41bf1887a64f0d99ce9bba341ed8b
-
SHA512
7f52c2dc2073c6e7975855b0012c30ffa871f56d172eb3f5a344f96aec2c132e8d259acaf1e6d94ece3678f87477cd104db99c0a5c29b90cd949a0cd7de1fd13
-
SSDEEP
768:fIj4bdHPqYKS1/US6GPQPFAi1Z4EmczereYM/6ogU:w4hHCdqcS69BkoZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40bc94e5e5e8a730bb5870025af52ba9fbe41bf1887a64f0d99ce9bba341ed8bN
Files
-
40bc94e5e5e8a730bb5870025af52ba9fbe41bf1887a64f0d99ce9bba341ed8bN.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 16KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE