Behavioral task
behavioral1
Sample
5796722b8b52ddb28ce6780d02627e69b9f6b1f95b0eaff3da7b72da57364920N.exe
Resource
win7-20240704-en
General
-
Target
5796722b8b52ddb28ce6780d02627e69b9f6b1f95b0eaff3da7b72da57364920N
-
Size
451KB
-
MD5
b4e65ae2efe9f45775c38ebfc5a6de20
-
SHA1
aace952f23c679793a52c757b9de5db5a245bad6
-
SHA256
5796722b8b52ddb28ce6780d02627e69b9f6b1f95b0eaff3da7b72da57364920
-
SHA512
26dc613bea7a7bc44e4ebdb6ead87e8ada81ba2d7976ae8cc017f8db068b2da156f0ae136969b0f371aa52e38804816702782d8a809c3fc79b2d53b98612c712
-
SSDEEP
12288:4PE9DHmO8U3k1lWIPb1Zl+UyLkqZ6gpnEwTY1RD3NWpRwZq:4s9DHmO8U3k1lWfsNWpb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5796722b8b52ddb28ce6780d02627e69b9f6b1f95b0eaff3da7b72da57364920N
Files
-
5796722b8b52ddb28ce6780d02627e69b9f6b1f95b0eaff3da7b72da57364920N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE