Behavioral task
behavioral1
Sample
557cb2de722a1f2c87efedc8c64eb65287851952dad56a2b3b54fe07025a7adfN.exe
Resource
win7-20240903-en
General
-
Target
557cb2de722a1f2c87efedc8c64eb65287851952dad56a2b3b54fe07025a7adfN
-
Size
85KB
-
MD5
9103324e12481bdaef21e5155ca4d2f0
-
SHA1
94e4c94f9b4b9a7e5e57b55d4bb26b0d1001d6b2
-
SHA256
557cb2de722a1f2c87efedc8c64eb65287851952dad56a2b3b54fe07025a7adf
-
SHA512
ed6d0b132484011be15ae22c678cbeadd5153fa2d7fff027cfa9f9d6daa6b3f6a8c579ea9369ca4b69cf63560b58748afd3e64c5158cb7f2be0562b1a7d24261
-
SSDEEP
768:8qnum1opQNwC3BESe4Vqth+0V5vKPyLylze70wi3BEmqJ:8vm1AeT7BVwxfvLFwjRqJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 557cb2de722a1f2c87efedc8c64eb65287851952dad56a2b3b54fe07025a7adfN
Files
-
557cb2de722a1f2c87efedc8c64eb65287851952dad56a2b3b54fe07025a7adfN.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 41KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ap0x Size: 1024B - Virtual size: 788B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE