Behavioral task
behavioral1
Sample
76945c89b7635c63bbf89904c934ac45eb623512dbcad04be4e9bd32ebf50d2aN.exe
Resource
win7-20241010-en
General
-
Target
76945c89b7635c63bbf89904c934ac45eb623512dbcad04be4e9bd32ebf50d2aN
-
Size
110KB
-
MD5
5f0f20da6c147174ff5a627574c17a30
-
SHA1
1eca72078d40c0b19725a3c28721cbc323199d65
-
SHA256
76945c89b7635c63bbf89904c934ac45eb623512dbcad04be4e9bd32ebf50d2a
-
SHA512
370433514af4dc7dd89a186d14d30f790d47097baac98d92381d5a415dff460b7c2872838893911e6e215c7f9859d78ad46c6298f73352b90d02abcd16665418
-
SSDEEP
1536:IiLOvRmmQegJfBbmAQ256/ZrwWnwqjhurmKFcxL8JQ2r0Eg:IiyvRmDLs/ZrwWJjAqGcRJ2hg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 76945c89b7635c63bbf89904c934ac45eb623512dbcad04be4e9bd32ebf50d2aN
Files
-
76945c89b7635c63bbf89904c934ac45eb623512dbcad04be4e9bd32ebf50d2aN.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 61KB - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE