Behavioral task
behavioral1
Sample
f28a9ec4de2284fe60fbb22d421d9fff2c42486ca674e87d96fd725f57948e1cN.exe
Resource
win7-20240903-en
General
-
Target
f28a9ec4de2284fe60fbb22d421d9fff2c42486ca674e87d96fd725f57948e1cN.exe
-
Size
559KB
-
MD5
2c16834015b1aed4e59cfbffa9c24670
-
SHA1
018d6b9601a8c4c5ca95c57fca58cb91f2d9419a
-
SHA256
f28a9ec4de2284fe60fbb22d421d9fff2c42486ca674e87d96fd725f57948e1c
-
SHA512
8c1c846920f380c8a5fd32a3a6e4f0b1c86a4c2c4499050673014ff475cbdc60297d7bb48b152cdf8b9b1996072a0f15a82c9d728750abfa697096152f75b480
-
SSDEEP
12288:x+xOrozCCYaCphtIYJb6lzOqPpFOblme0pLLsbii9cWDeO7HtoNmKzoSZ:COEzCFaCpAYJbwzOqPUlvOsmi9c8Sl7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f28a9ec4de2284fe60fbb22d421d9fff2c42486ca674e87d96fd725f57948e1cN.exe
Files
-
f28a9ec4de2284fe60fbb22d421d9fff2c42486ca674e87d96fd725f57948e1cN.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 555KB - Virtual size: 556KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE