Behavioral task
behavioral1
Sample
15b63db1de03a09cf59a9300633d28db562ae4457851ccf87cd62b6a7a14df99N.exe
Resource
win7-20240903-en
General
-
Target
15b63db1de03a09cf59a9300633d28db562ae4457851ccf87cd62b6a7a14df99N.exe
-
Size
2.0MB
-
MD5
db764e486a60cd078198861e394198e0
-
SHA1
0f232bc98a73a2f55c43a24f721ed44509824f7a
-
SHA256
15b63db1de03a09cf59a9300633d28db562ae4457851ccf87cd62b6a7a14df99
-
SHA512
d65afbc6dbdc083a3a0cbe6435afd0a718e83552faf55040c1a289dcf2d0be4a56785d0430c6484ae7455f7acbe362c1a74a28d6a90a5862741686d8b19d3b9e
-
SSDEEP
49152:Gs29+ZP3+ewMxu6Vb6Vcg2wrsi0nT9TIlfasAFxh/KKlUm3ee:GX+ZP3pwl6VGVX2wrsi0nT5IVa1xhC0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15b63db1de03a09cf59a9300633d28db562ae4457851ccf87cd62b6a7a14df99N.exe
Files
-
15b63db1de03a09cf59a9300633d28db562ae4457851ccf87cd62b6a7a14df99N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 4.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reltc Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE