Behavioral task
behavioral1
Sample
f863e231dbd1e81b1d47ff8318da9687e4eef6422dd47f99cf6b1a68246f9014N.exe
Resource
win7-20240903-en
General
-
Target
f863e231dbd1e81b1d47ff8318da9687e4eef6422dd47f99cf6b1a68246f9014N.exe
-
Size
345KB
-
MD5
e44cca056e9fd63745627adf202ebde0
-
SHA1
2374b27f0f5089bebf2e0fd8585cb4564fe4e8f1
-
SHA256
f863e231dbd1e81b1d47ff8318da9687e4eef6422dd47f99cf6b1a68246f9014
-
SHA512
92500bb1d096b2b839a90cf41734e2538de9a10d134a5968cc16fee5ed5737d6f542c4b14dfc676667d047020de7f6745e5a85d9ee6db4a8da7b541b393a1737
-
SSDEEP
6144:Lcm4FmowdHoSEYW5fNZWB5hFfci3Add4kGYAm:R4wFHoS3WXZshJX2VGdm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f863e231dbd1e81b1d47ff8318da9687e4eef6422dd47f99cf6b1a68246f9014N.exe
Files
-
f863e231dbd1e81b1d47ff8318da9687e4eef6422dd47f99cf6b1a68246f9014N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE