Behavioral task
behavioral1
Sample
0efa9a314138c125f00395e902a2bc3972f4f33070cf8062bf04fe72bf4917adN.exe
Resource
win7-20240903-en
General
-
Target
0efa9a314138c125f00395e902a2bc3972f4f33070cf8062bf04fe72bf4917adN
-
Size
136KB
-
MD5
5f0b27d1644ac1f424867fb8869855b0
-
SHA1
451fa73740c5c7b84152cd86426f228c73e663e8
-
SHA256
0efa9a314138c125f00395e902a2bc3972f4f33070cf8062bf04fe72bf4917ad
-
SHA512
7459b41257f940370ab37c7b622478e0b3fea062725c6fcbd1221026d7d5734ede9ded06e4998165506c4f8fa60c2aa94780b4cf18645a2b1498ac1fbc10c914
-
SSDEEP
1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q6v/i+vrA+SCm7x1wzp:fnyiQSo6ni+9m7x1wzp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0efa9a314138c125f00395e902a2bc3972f4f33070cf8062bf04fe72bf4917adN
Files
-
0efa9a314138c125f00395e902a2bc3972f4f33070cf8062bf04fe72bf4917adN.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE