Behavioral task
behavioral1
Sample
20db03297dccb6124504387a93cc7c795e6ce08018ebf2241e04845423727903N.exe
Resource
win7-20240708-en
General
-
Target
20db03297dccb6124504387a93cc7c795e6ce08018ebf2241e04845423727903N
-
Size
3.9MB
-
MD5
37abf5fff55cb0cfabae88e1bbe313b0
-
SHA1
d0d63b7a7e24a71f90d27f071a8a68fc3fc33e0f
-
SHA256
20db03297dccb6124504387a93cc7c795e6ce08018ebf2241e04845423727903
-
SHA512
854a49d55192a83fd1ecac6144724dbee18aad1cab5dd28bc2037487b5ece1e837ef61b2379675deae4fca3df17d933fc7381560c51cd93b04cda07f88a50cb1
-
SSDEEP
98304:QNLzNShgiTA9zyULG+YFin9PAr+LzKA9zyULG+0Y7+Wp303yA9zyULG+YFin9PAc:OtShJ8zLqUhArmPzLqJYrGzzLqUhArmC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 20db03297dccb6124504387a93cc7c795e6ce08018ebf2241e04845423727903N
Files
-
20db03297dccb6124504387a93cc7c795e6ce08018ebf2241e04845423727903N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE