Behavioral task
behavioral1
Sample
14c2506e8adf9b537cdc926e24e77ecb21083003a05b870c075e80eb77004fe5N.exe
Resource
win7-20240903-en
General
-
Target
14c2506e8adf9b537cdc926e24e77ecb21083003a05b870c075e80eb77004fe5N.exe
-
Size
110KB
-
MD5
d53b0e0f20d0de458a5bbf575a397690
-
SHA1
75c718aff0b1019d747fabe5dcd0d89ba8c7d89f
-
SHA256
14c2506e8adf9b537cdc926e24e77ecb21083003a05b870c075e80eb77004fe5
-
SHA512
a941c8625e294229c2bc1dd2db420aa5e49c08a01b3c1af8d58c8dbc707425bd3911f2a828007cfc553667eee900345ce3c17cd3bb98285c02da7548cc269842
-
SSDEEP
1536:JiLOvRmmQegJfBbmAQ256/ZrwWnwqjhurmKFcxL8JQ2r0Eg:JiyvRmDLs/ZrwWJjAqGcRJ2hg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14c2506e8adf9b537cdc926e24e77ecb21083003a05b870c075e80eb77004fe5N.exe
Files
-
14c2506e8adf9b537cdc926e24e77ecb21083003a05b870c075e80eb77004fe5N.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 61KB - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE