Behavioral task
behavioral1
Sample
f561e8f01bc590acf8b92c17c038ce2308b04719293f74d6d06f54d4fcb9b07dN.exe
Resource
win7-20240903-en
General
-
Target
f561e8f01bc590acf8b92c17c038ce2308b04719293f74d6d06f54d4fcb9b07dN
-
Size
704KB
-
MD5
a94a66a1c2383e0e8172bc2fe2ccd920
-
SHA1
a448dd7e1332642768ea60228448b5b2c55731af
-
SHA256
f561e8f01bc590acf8b92c17c038ce2308b04719293f74d6d06f54d4fcb9b07d
-
SHA512
9826d0cd427d7f4856b6406d47a48f8b2a4488598edd719deeb40ddd7d3afa4a5556e7fb279e70f00ebd18343f65c0531fca32ded2165cbb63e7a8b90c0fbc98
-
SSDEEP
12288:Eayqel5dSC2OxpTy5ayqel5dSC2OxdTy:JRe0kpTy0Re0kdTy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f561e8f01bc590acf8b92c17c038ce2308b04719293f74d6d06f54d4fcb9b07dN
Files
-
f561e8f01bc590acf8b92c17c038ce2308b04719293f74d6d06f54d4fcb9b07dN.exe .vbs windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 168KB - Virtual size: 168KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 460KB - Virtual size: 460KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE