Behavioral task
behavioral1
Sample
bd4666f797e288fc1ed9bc3073b63652dd0696d76379718b709bc35b9f00409cN.exe
Resource
win7-20240903-en
General
-
Target
bd4666f797e288fc1ed9bc3073b63652dd0696d76379718b709bc35b9f00409cN
-
Size
568KB
-
MD5
192362c6583622c3d6ac605ece9403f0
-
SHA1
bc141822f4cde2f2984a0516e5ac2b055c51ef42
-
SHA256
bd4666f797e288fc1ed9bc3073b63652dd0696d76379718b709bc35b9f00409c
-
SHA512
137bd19f8769f2b91699a004fcf0bd2eed3e17f1bf6105e2b1f60198c3979b2112d0c14bfc55db7c56e587b4274ef5a8ef8e76dc8f92edfcb76fd462d7958b58
-
SSDEEP
6144:t/sWvDs2z6EJ3Lj1/AkBPI/cmEYv1Zpr8QplBY8Kh5Wr6oa+dH7DCBA3hzhx6UDX:xs2z6CJ/jSTYlzMDCix9x6UDbp0h8H
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd4666f797e288fc1ed9bc3073b63652dd0696d76379718b709bc35b9f00409cN
Files
-
bd4666f797e288fc1ed9bc3073b63652dd0696d76379718b709bc35b9f00409cN.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 204KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE