Behavioral task
behavioral1
Sample
52069fabe4291f16145d88c4f2647fad7e8dc5813bb21eb924364eb584d4b631N.exe
Resource
win7-20240903-en
General
-
Target
52069fabe4291f16145d88c4f2647fad7e8dc5813bb21eb924364eb584d4b631N
-
Size
269KB
-
MD5
da13c9f04ce45c4b25f1becb01640ed0
-
SHA1
374e33e3b1d131c60e5ec0af3c4f68212b94d880
-
SHA256
52069fabe4291f16145d88c4f2647fad7e8dc5813bb21eb924364eb584d4b631
-
SHA512
025efc6ef8e0c9fec68a24859b6c31745824af16b251f980a4c1bfe50c854b578e66c4bd7f6073a849a1be4bcd73f12140945e151f84494b8724ca276e4036d8
-
SSDEEP
6144:Ycm4FmowdHoSgWrXF5lpKGYV0aTk/BO0XJm4UEPOshN/xdKnvP48bmx:e4wFHoSgWjdpKGATTk/jYIOWN/KnnPU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 52069fabe4291f16145d88c4f2647fad7e8dc5813bb21eb924364eb584d4b631N
Files
-
52069fabe4291f16145d88c4f2647fad7e8dc5813bb21eb924364eb584d4b631N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE