Behavioral task
behavioral1
Sample
4e4fa1e8132a0fe8455fc686560c2426cbf59a74c2bd9e04707e102a3a55eb19N.exe
Resource
win7-20241010-en
General
-
Target
4e4fa1e8132a0fe8455fc686560c2426cbf59a74c2bd9e04707e102a3a55eb19N
-
Size
227KB
-
MD5
6350bfdc734cfb30af13df65957044b0
-
SHA1
7a6efe358bc94cea9f20aa3a7da4662f8a92a7e9
-
SHA256
4e4fa1e8132a0fe8455fc686560c2426cbf59a74c2bd9e04707e102a3a55eb19
-
SHA512
8f1c1dc52133b117d5146c9c2d6678e59bf8f76d54be9e5cc572a90a5667e4df70bcbbe2c0dbcddc98a55505456405a9989085c51bdef5ea73a184d9f9c8f026
-
SSDEEP
6144:jvNzUzbF68H3S8+b6uyptXIi9u/mp8saZHRD4v4M84Z9YkF/GeHNHyORQdcIKtR:jvw68XS8+d8HamysaZHRD44M3ZzF/Gej
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e4fa1e8132a0fe8455fc686560c2426cbf59a74c2bd9e04707e102a3a55eb19N
Files
-
4e4fa1e8132a0fe8455fc686560c2426cbf59a74c2bd9e04707e102a3a55eb19N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ