Behavioral task
behavioral1
Sample
74c9d095c8511e373d6dbd60042753eed6852e94b89906e7eca85d93ea1087c5N.exe
Resource
win7-20240903-en
General
-
Target
74c9d095c8511e373d6dbd60042753eed6852e94b89906e7eca85d93ea1087c5N
-
Size
163KB
-
MD5
744483016df95e45140c86968ecdd8b0
-
SHA1
b08c476a6f2808565fef8090844ce5b46f8afcf4
-
SHA256
74c9d095c8511e373d6dbd60042753eed6852e94b89906e7eca85d93ea1087c5
-
SHA512
79e9423c26436546f0d1fd80d7592b030ea74e7bf6c16d2eb42adfa602f81a7654ba1c2f27b10d17fdbc9241a5287c543fdf64104af4d8ca234cc56dbf187d37
-
SSDEEP
1536:V7Zf/FAxTWoJJZENTBHfiPM4pWHlPEXZzjUq3th5f6utM5vLNinVmWvMu0b2UdpL:fny1tECWHIjN3tj6qnv0b2UrXkbvLq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 74c9d095c8511e373d6dbd60042753eed6852e94b89906e7eca85d93ea1087c5N
Files
-
74c9d095c8511e373d6dbd60042753eed6852e94b89906e7eca85d93ea1087c5N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE