Behavioral task
behavioral1
Sample
ac198520eb1edd75e61f90a4cd8085e8820684c7bb8bc13750f9b63825562055N.exe
Resource
win7-20241023-en
General
-
Target
ac198520eb1edd75e61f90a4cd8085e8820684c7bb8bc13750f9b63825562055N.exe
-
Size
110KB
-
MD5
0e2508ec7472735d63ab8363d70696f0
-
SHA1
a2786c5785c51e143e22cabf4c10cf0dea80646f
-
SHA256
ac198520eb1edd75e61f90a4cd8085e8820684c7bb8bc13750f9b63825562055
-
SHA512
c6834619094485642ada3d23ad21b26af621bbd7885f2dc14caf9611fe3921fb16963d940d73b998fbd9bb957358131898659f200b59035bee3dd852efabc845
-
SSDEEP
1536:jiLOvRmmQegJfBbmAQ256/ZrwWnwqjhurmKFcxL8JQ2r0Eg:jiyvRmDLs/ZrwWJjAqGcRJ2hg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac198520eb1edd75e61f90a4cd8085e8820684c7bb8bc13750f9b63825562055N.exe
Files
-
ac198520eb1edd75e61f90a4cd8085e8820684c7bb8bc13750f9b63825562055N.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 61KB - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE