Behavioral task
behavioral1
Sample
fdb5209c306a8a2c8ef4f059b315bc1f5dee72c5c69be69afc470fe925728ac7N.exe
Resource
win7-20240903-en
General
-
Target
fdb5209c306a8a2c8ef4f059b315bc1f5dee72c5c69be69afc470fe925728ac7N
-
Size
156KB
-
MD5
67c046b49991fbbb2078ddb335b82130
-
SHA1
347bf4bd9829f3b93dd053c9dd6ccc7a2e512b9d
-
SHA256
fdb5209c306a8a2c8ef4f059b315bc1f5dee72c5c69be69afc470fe925728ac7
-
SHA512
e9ab456dc47440cfadcc97928b3aa5758272e63bcfdeb0832fe8e5a677c842d23edc13b866fb5b54d6178ec68bc8a18d7baa9d9ca3c418c66425f7c048dd946b
-
SSDEEP
1536:V7Zf/FAxTWoJJ7TUW24pWHlPEXZzjUq3th5f6utM5vLNinVmWvMu0b2UdpXk+p0d:fny1oWdWHIjN3tj6qnv0b2UrXkbvLx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fdb5209c306a8a2c8ef4f059b315bc1f5dee72c5c69be69afc470fe925728ac7N
Files
-
fdb5209c306a8a2c8ef4f059b315bc1f5dee72c5c69be69afc470fe925728ac7N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE