Behavioral task
behavioral1
Sample
24219f469f119f066caf6405233401c63653448c49a46eef068f86a3765fb9c5N.exe
Resource
win7-20240708-en
General
-
Target
24219f469f119f066caf6405233401c63653448c49a46eef068f86a3765fb9c5N
-
Size
63KB
-
MD5
c45542f7348b44eac709ea28422f8140
-
SHA1
290b3113e2ad5ae110834fe0fa480970fe529a02
-
SHA256
24219f469f119f066caf6405233401c63653448c49a46eef068f86a3765fb9c5
-
SHA512
0549304aedccfc2bac824c9c86911874df40166a401a5fbe31e61dd83501251942c65080c426effbdaee44c18ae7114479ec4980f91ae88da950fb2058896ea3
-
SSDEEP
768:r8eRH+MlFh0pDpuJ84WEi+U6sh7iQroCHmyf+RjFBSuB2XpfsPpzSdtKx1R:r9l+W8xFt6sh7iQroCoRB0u0sPpzSS1R
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24219f469f119f066caf6405233401c63653448c49a46eef068f86a3765fb9c5N
Files
-
24219f469f119f066caf6405233401c63653448c49a46eef068f86a3765fb9c5N.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 20KB - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE