Behavioral task
behavioral1
Sample
b1693d1b2a27b200ff8c0378f1db656cd7ad9c830c6c93fd3ed5ea7b3e2d8a85N.exe
Resource
win7-20240903-en
General
-
Target
b1693d1b2a27b200ff8c0378f1db656cd7ad9c830c6c93fd3ed5ea7b3e2d8a85N
-
Size
459KB
-
MD5
c315548107476e702555a05490f385c0
-
SHA1
66f5e8d60932ba77982e7e4fd0f536b2a1baac43
-
SHA256
b1693d1b2a27b200ff8c0378f1db656cd7ad9c830c6c93fd3ed5ea7b3e2d8a85
-
SHA512
47d210ef301e6a3192a7dae58352b0097da967035242f1a147a43b23f57ac2c63a09a9aea7210c2a56d3a19b0fe5e6a8ba3e6af520e297d5fec85cb9377f23a9
-
SSDEEP
6144:8c27KLzpMCnzDN7uOuxfHl7mQCUhsd6lLoAaNvGv7d4SnOmcOLJcIn5:5GCnzD50h9mTU6oGo7dBOTOLJcM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1693d1b2a27b200ff8c0378f1db656cd7ad9c830c6c93fd3ed5ea7b3e2d8a85N
Files
-
b1693d1b2a27b200ff8c0378f1db656cd7ad9c830c6c93fd3ed5ea7b3e2d8a85N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE