Behavioral task
behavioral1
Sample
af44fa2dae912a92f20565ab6b4b2c789c3be74a8775000930ebf61e761f9732N.exe
Resource
win7-20240903-en
General
-
Target
af44fa2dae912a92f20565ab6b4b2c789c3be74a8775000930ebf61e761f9732N
-
Size
39KB
-
MD5
5158b3ec5fc5c0772521e6bb0d926b70
-
SHA1
3507578bbfaefc3c656b377bd24e66a168ea3313
-
SHA256
af44fa2dae912a92f20565ab6b4b2c789c3be74a8775000930ebf61e761f9732
-
SHA512
6aed187b393ed76309d39eeffcff1b80aa3616a79ea266bc41eafb0c19c2fb01af83f919cb3c68bfe56ee2d67ec37f5190dfe2b93dafffbcf741d4ef1210d0d3
-
SSDEEP
384:wScaozzwEDkyM7R0zVUzwMdSSRAXzJVBcGzcF:wJP4EhyMO8MdoJVMF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af44fa2dae912a92f20565ab6b4b2c789c3be74a8775000930ebf61e761f9732N
Files
-
af44fa2dae912a92f20565ab6b4b2c789c3be74a8775000930ebf61e761f9732N.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE