Behavioral task
behavioral1
Sample
ac7e2e2643c12165fce7bd45779f175652a2f37c8833e0407c9ee127075c3c23N.exe
Resource
win7-20240903-en
General
-
Target
ac7e2e2643c12165fce7bd45779f175652a2f37c8833e0407c9ee127075c3c23N
-
Size
102KB
-
MD5
04abca99a811384350d835962f7bee00
-
SHA1
7d26f53699af0d4d4f328f8273d8916514455941
-
SHA256
ac7e2e2643c12165fce7bd45779f175652a2f37c8833e0407c9ee127075c3c23
-
SHA512
1e3950ce1baf9a1768a85edc9f6435d104823b7f3420516b48a446f57f6ab3d0fcd099e7e0b259b0e35af72e1e27dbb05b1e1212c3ecd15512f37224fec839d4
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjyJJcbQbf1Oti1JGBQOOiQJhATBaMYhOzB3GmKKm:V7Zf/FAxTWoJJZENTBTYhQ2aERm3w0U
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac7e2e2643c12165fce7bd45779f175652a2f37c8833e0407c9ee127075c3c23N
Files
-
ac7e2e2643c12165fce7bd45779f175652a2f37c8833e0407c9ee127075c3c23N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE