Behavioral task
behavioral1
Sample
4fbbdc9c755eee6d4476976fc803591f41ad9d2abe6fb2067eb396204d06c399N.exe
Resource
win7-20240903-en
General
-
Target
4fbbdc9c755eee6d4476976fc803591f41ad9d2abe6fb2067eb396204d06c399N.exe
-
Size
572KB
-
MD5
f03151ff4d4da36ac8fa3d38fcf7ac60
-
SHA1
6ac997fe62b45b72c485d07470175f830c2bdb9f
-
SHA256
4fbbdc9c755eee6d4476976fc803591f41ad9d2abe6fb2067eb396204d06c399
-
SHA512
c8d4d8a2b4a878b728e82eca1c467c437656c128625316166ba014fdac5f1477be98348deefcb50a60db54c504a962ddc02c947d5b0b941cf5b513889bd82598
-
SSDEEP
12288:2k7onL2P1pGj9ompK1Gs2kTdM/MtPHYrbgX1IuS:BYCP14pOGs2khWca+ez
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4fbbdc9c755eee6d4476976fc803591f41ad9d2abe6fb2067eb396204d06c399N.exe
Files
-
4fbbdc9c755eee6d4476976fc803591f41ad9d2abe6fb2067eb396204d06c399N.exe.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 123KB - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 375KB - Virtual size: 376KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE