Behavioral task
behavioral1
Sample
b1613cb95447d2a300caec9ba73ba7ce2d12f3b93eb2f9a1e8c6acc188bb2920N.exe
Resource
win7-20240903-en
General
-
Target
b1613cb95447d2a300caec9ba73ba7ce2d12f3b93eb2f9a1e8c6acc188bb2920N
-
Size
1.0MB
-
MD5
e09441140384e20a1f54484e975c9380
-
SHA1
9824f16e959ddeea7e27782f4874b05073bea56a
-
SHA256
b1613cb95447d2a300caec9ba73ba7ce2d12f3b93eb2f9a1e8c6acc188bb2920
-
SHA512
d40abc208f15c9f2786f6a00b46bfdd9462475745e0a4f6179cc6c631c21b4acaf3e19b649e5a66dcdc424d6e68eafbe2bde629a27098060e25ca1304005c38c
-
SSDEEP
24576:PP9B4Xv6zwEAxx0jW4opdxm/mW1X0Vdfx0s2w2ufDLIwuycr1j:PP9e5moEX00
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1613cb95447d2a300caec9ba73ba7ce2d12f3b93eb2f9a1e8c6acc188bb2920N
Files
-
b1613cb95447d2a300caec9ba73ba7ce2d12f3b93eb2f9a1e8c6acc188bb2920N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE