Behavioral task
behavioral1
Sample
9599a8e115ea7519ae0e5ad89bfd4cd6652a5899c9a94180591a8ef354380cbeN.exe
Resource
win7-20240903-en
General
-
Target
9599a8e115ea7519ae0e5ad89bfd4cd6652a5899c9a94180591a8ef354380cbeN
-
Size
86KB
-
MD5
74633ad997d5d34424d636bd5942c650
-
SHA1
42fa30fa779b551a5b60adebca9c66d6dde83f1d
-
SHA256
9599a8e115ea7519ae0e5ad89bfd4cd6652a5899c9a94180591a8ef354380cbe
-
SHA512
532bf23cd222f727f3d669ddc21fc9f378e63186e8494bb93125372631c8f825d9e0294fd33bde020b12724dc96272fb2923f8d8c455672fd9ceda58a82911d5
-
SSDEEP
1536:5zThFfdDziUxqJtJjtklzz7BKKWQ7f0CmuJd4BXac6:RhFf1grYzXBbd4In
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9599a8e115ea7519ae0e5ad89bfd4cd6652a5899c9a94180591a8ef354380cbeN
Files
-
9599a8e115ea7519ae0e5ad89bfd4cd6652a5899c9a94180591a8ef354380cbeN.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 168KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE