Behavioral task
behavioral1
Sample
12c4898b0a847dddf5e6f2828d65d9b7e36ce02917fc751916682996d9f15d81N.exe
Resource
win7-20240903-en
General
-
Target
12c4898b0a847dddf5e6f2828d65d9b7e36ce02917fc751916682996d9f15d81N
-
Size
138KB
-
MD5
afe5f76d2272a94857b6793d3c8133f0
-
SHA1
aab00a58090e137df6315186a729cbadcb31b917
-
SHA256
12c4898b0a847dddf5e6f2828d65d9b7e36ce02917fc751916682996d9f15d81
-
SHA512
59f4e22fa93e1da72d1cf3543265f67ff7a1ab1b3a61ca4a4543ab45ede0880fc55efc0c01bf3b6eb2963c649a2172bb2e4c5eaf921d673ebdb072fdd8ac36fb
-
SSDEEP
1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8zxY5TUhUd7PzZYlWAt8T3G63Q8+Rp7Ml:fnyiQSox5Aud71YzE3G4+Rp1ix
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12c4898b0a847dddf5e6f2828d65d9b7e36ce02917fc751916682996d9f15d81N
Files
-
12c4898b0a847dddf5e6f2828d65d9b7e36ce02917fc751916682996d9f15d81N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE