Behavioral task
behavioral1
Sample
79a3f0f08d168e4d92baab19528f2026fe09544f9ad887f747026dd6c9855eebN.exe
Resource
win7-20240903-en
General
-
Target
79a3f0f08d168e4d92baab19528f2026fe09544f9ad887f747026dd6c9855eebN
-
Size
171KB
-
MD5
a410a681a514909b25bf425ea1927b50
-
SHA1
1f97b3f5c7d9a4b88f11020d7af9bc87766e4812
-
SHA256
79a3f0f08d168e4d92baab19528f2026fe09544f9ad887f747026dd6c9855eeb
-
SHA512
95363ec301a12ded4c852bdc382274ead32d66f49999db8d139fb3a3a440a68ac4ab0cd4334412fda987e24212840d31055fc943839d3b996f772d4968a0fb22
-
SSDEEP
3072:fny1oRUhehAdWHIjN3tj6qnv0b2UrXkbvL2:KWRUhehFIjNDv0bNXkbvL2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 79a3f0f08d168e4d92baab19528f2026fe09544f9ad887f747026dd6c9855eebN
Files
-
79a3f0f08d168e4d92baab19528f2026fe09544f9ad887f747026dd6c9855eebN.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE