Behavioral task
behavioral1
Sample
4b59baae73fddc053e3f9b316f5dbc9b504e90d84e1e4350d728aee031c02092N.exe
Resource
win7-20240903-en
General
-
Target
4b59baae73fddc053e3f9b316f5dbc9b504e90d84e1e4350d728aee031c02092N.exe
-
Size
576KB
-
MD5
0d4e3130a1ff4c031c68347166182830
-
SHA1
acc8e4de14ae6a3bf54eea92d14146f2dd3c3e80
-
SHA256
4b59baae73fddc053e3f9b316f5dbc9b504e90d84e1e4350d728aee031c02092
-
SHA512
12506f2596f2f03423b82ce7fda0240f6a93d9e344ba0b70626b3d237712d7a9d612b543cab4e9da7b937d1a6358a19bc8ceb616fbe210c37b56d7e873f8b699
-
SSDEEP
12288:+NWPkHlUkErBuxQ4uzi6d6dL/yiXLzeMdK6io8levy0FhVlpzkzDDoSP:+NWPkHlUfBgpuPdWzyuDTifgyWlU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b59baae73fddc053e3f9b316f5dbc9b504e90d84e1e4350d728aee031c02092N.exe
Files
-
4b59baae73fddc053e3f9b316f5dbc9b504e90d84e1e4350d728aee031c02092N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 572KB - Virtual size: 572KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE