Behavioral task
behavioral1
Sample
2623470a8ba7849bd605f3ed080d157c3887aa947236ca30cdf51d21f5e88392N.exe
Resource
win7-20240903-en
General
-
Target
2623470a8ba7849bd605f3ed080d157c3887aa947236ca30cdf51d21f5e88392N
-
Size
131KB
-
MD5
398c1a80c9c90706c7a102ad3e1e9bc0
-
SHA1
65e203bd53aa41d75dc28fb7a5f0009dd421a51a
-
SHA256
2623470a8ba7849bd605f3ed080d157c3887aa947236ca30cdf51d21f5e88392
-
SHA512
03e3bb30e5dd599fd7aa04f42fa96b645e3feae11fbdbb4ab9c56dff19a7981de33a454554e73b3df282f1dfe3f4fe4ea2885fe77be9333e1d740309088a849d
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjyJJcbQbf1Oti1JGBQOOiQJhATBHfBo8o3PVMN1O:V7Zf/FAxTWoJJZENTBHfiPCNc8uO6zX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2623470a8ba7849bd605f3ed080d157c3887aa947236ca30cdf51d21f5e88392N
Files
-
2623470a8ba7849bd605f3ed080d157c3887aa947236ca30cdf51d21f5e88392N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE