Behavioral task
behavioral1
Sample
801447d8a2f8b8d4358f5633a7535d97a62e28f50385d85d2d1984c78357c248N.exe
Resource
win7-20240903-en
General
-
Target
801447d8a2f8b8d4358f5633a7535d97a62e28f50385d85d2d1984c78357c248N.exe
-
Size
2.0MB
-
MD5
5477f937faf9b8dfab1dc0d086da3f70
-
SHA1
73bc2cb0927e7d0555e01a3df089c5ba6f6106cd
-
SHA256
801447d8a2f8b8d4358f5633a7535d97a62e28f50385d85d2d1984c78357c248
-
SHA512
d86b749836320e23de6d84b4364be00b0e4aabb3f268eb75e3305d94f321a16cbefa8703139fc3ea7c73aff402e05f26d5710ab84167cefbbb94b237f22c8bc8
-
SSDEEP
49152:4nk99UOFiOnnQZHWy6BYQMC4IkPMb3rmO+AAn15mh/KKlUm3ee6:4E9UOFiqnQZHvuJMxjPMbSOJC6hC06
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 801447d8a2f8b8d4358f5633a7535d97a62e28f50385d85d2d1984c78357c248N.exe
Files
-
801447d8a2f8b8d4358f5633a7535d97a62e28f50385d85d2d1984c78357c248N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 4.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reltc Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE