Behavioral task
behavioral1
Sample
b5ddf259ac3a01bbd74493630fa7d9267891cba86976331109e46687a2841674N.exe
Resource
win7-20241010-en
General
-
Target
b5ddf259ac3a01bbd74493630fa7d9267891cba86976331109e46687a2841674N
-
Size
119KB
-
MD5
19f3dc816b2b3c35f6199ef6a2dfd950
-
SHA1
c768f3119190ff79a3295fac0c447e5a4a953628
-
SHA256
b5ddf259ac3a01bbd74493630fa7d9267891cba86976331109e46687a2841674
-
SHA512
506ffc2914e5bb669ec5c63dd229fbb485633084aef8131b784ee30bab77fd541e280debacb56e15a472a1efcb053004368d5de268acffc590d50e6c4f513755
-
SSDEEP
1536:V7Zf/FAxTWoJJ7TTQoQS/HSXIBlE3hha08yZySzCeHbGyH5cNvS9fvSxNFSwUoKk:fny1oRS/HSXIBlf08qySzCeHbY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b5ddf259ac3a01bbd74493630fa7d9267891cba86976331109e46687a2841674N
Files
-
b5ddf259ac3a01bbd74493630fa7d9267891cba86976331109e46687a2841674N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE