Behavioral task
behavioral1
Sample
bbe5a40883e83148c91c476c4ded4116f7859ac93249ba7d52f2d39bab8420f7N.exe
Resource
win7-20240903-en
General
-
Target
bbe5a40883e83148c91c476c4ded4116f7859ac93249ba7d52f2d39bab8420f7N
-
Size
138KB
-
MD5
e3c164d3973e88b0faf12d06ebd67fe0
-
SHA1
10475610c6dee12685b0e1f166dfc371f9a3a13f
-
SHA256
bbe5a40883e83148c91c476c4ded4116f7859ac93249ba7d52f2d39bab8420f7
-
SHA512
a69dc1e3bb80d5ebd0584186b4e2bf46e32a9fbe2ad03a2f79a5ad83d6f89e9ab42bdba4bb2879c83a5dfadc275c0b36ece663011622bed0ee7ac491206e69e1
-
SSDEEP
1536:V7Zf/FAxTWoJJTU3UytJfOKI+h/YI+h/B1nAQanAQMgjsTn7fpXpgmvzOdSrnvOE:fny1sI+h/YI+h/BZQsTLpXYSrnvOZx0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bbe5a40883e83148c91c476c4ded4116f7859ac93249ba7d52f2d39bab8420f7N
Files
-
bbe5a40883e83148c91c476c4ded4116f7859ac93249ba7d52f2d39bab8420f7N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE