Behavioral task
behavioral1
Sample
bea1819a7ab01312adf264308d5ecabb05d1cbb8c58f6943e78b7a9391c77838N.exe
Resource
win7-20240903-en
General
-
Target
bea1819a7ab01312adf264308d5ecabb05d1cbb8c58f6943e78b7a9391c77838N.exe
-
Size
254KB
-
MD5
dc22f86afd3fdd13045f2c4d544f2b10
-
SHA1
85c194451491931e5d1b3b33c0efa7a8280b97a6
-
SHA256
bea1819a7ab01312adf264308d5ecabb05d1cbb8c58f6943e78b7a9391c77838
-
SHA512
c53feb6d8b9b5fc212c5bb52de82ab57523e94fb812092e1a3ffd30b8039bfd41e89658fd920494fa702f1b65a2aaef39674c49616f60f5b302b046f5d4ae0a2
-
SSDEEP
6144:kcm4FmowdHoSphraHcpOaKHpolTjZXvEQo9dfBP/l:y4wFHoS3eFaKHpKT9XvEhdfBP/l
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bea1819a7ab01312adf264308d5ecabb05d1cbb8c58f6943e78b7a9391c77838N.exe
Files
-
bea1819a7ab01312adf264308d5ecabb05d1cbb8c58f6943e78b7a9391c77838N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE