Behavioral task
behavioral1
Sample
938a9946bd7de4609cf4fce1e7a818b55c5f29dd06c92d3519e6b8841582d26bN.exe
Resource
win7-20240903-en
General
-
Target
938a9946bd7de4609cf4fce1e7a818b55c5f29dd06c92d3519e6b8841582d26bN.exe
-
Size
59KB
-
MD5
784a06a4e32209052c721bea8cd3c548
-
SHA1
19f251db0d6159372abfa63e48e468d716892287
-
SHA256
df4febefba7addc0e1d19578d7bc17431744500d5ab884dd127aab0a2dbd8003
-
SHA512
c165b90f302254f274868ef0c2f7deb1de06bdca87ade6bde75217f6e11ab20cd77d0b4c4bbe35499f801bd849db5bf23e0e6252a1e417930376d845699050f1
-
SSDEEP
1536:6W82C0Db1edMckBI1kmJAhTPY6pnouy8qS:6n25DbaMySmJAhbvoutqS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 938a9946bd7de4609cf4fce1e7a818b55c5f29dd06c92d3519e6b8841582d26bN.exe
Files
-
938a9946bd7de4609cf4fce1e7a818b55c5f29dd06c92d3519e6b8841582d26bN.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 112KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 48KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE