Behavioral task
behavioral1
Sample
1ea797f28096c3e329b890b87381642997560bae153b01b2fe53f5b1aee0bd80N.exe
Resource
win7-20240903-en
General
-
Target
1ea797f28096c3e329b890b87381642997560bae153b01b2fe53f5b1aee0bd80N
-
Size
1.9MB
-
MD5
74cbeaf9626fe70888f20217dda74b10
-
SHA1
e296d460dea2727fd6ce059b5b7438931b95d7a9
-
SHA256
1ea797f28096c3e329b890b87381642997560bae153b01b2fe53f5b1aee0bd80
-
SHA512
0ec0465ce0b11c52fd8a2c334289bb575c5d3722571a183460cb25230ab31baf9537b076bbe088f478ff78b5cd2f67cdce6ee7aff3103eb4cee7e22f6246801d
-
SSDEEP
49152:Sm5CQfyv7YcQ0n0g+v9J4T3BnZi3JQDfQ:hCQsYdo+lOLBnZ+WfQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1ea797f28096c3e329b890b87381642997560bae153b01b2fe53f5b1aee0bd80N
Files
-
1ea797f28096c3e329b890b87381642997560bae153b01b2fe53f5b1aee0bd80N.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 136KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE