Behavioral task
behavioral1
Sample
58261d5e436afecee936ca11f2441cf176fcd4c6b51b8fded8620878e142285bN.exe
Resource
win7-20240729-en
General
-
Target
58261d5e436afecee936ca11f2441cf176fcd4c6b51b8fded8620878e142285bN.exe
-
Size
110KB
-
MD5
5f3a88d65f17aa4489ba5206dbe44b10
-
SHA1
aa487aeb8d7a96fdf3f16c238dc95005d77c76bf
-
SHA256
58261d5e436afecee936ca11f2441cf176fcd4c6b51b8fded8620878e142285b
-
SHA512
cd33ede53cb6468bb43cee8db87631bda992fe85e50d96ebfdc1f556f3c4af335bf642836cc5845df80614c60aa227f8cab6227af4c7166e15de68106ad38255
-
SSDEEP
1536:+iLOvRmmQegJfBbmAQ256/ZrwWnwqjhurmKFcxL8JQ2r0EA:+iyvRmDLs/ZrwWJjAqGcRJ2hA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 58261d5e436afecee936ca11f2441cf176fcd4c6b51b8fded8620878e142285bN.exe
Files
-
58261d5e436afecee936ca11f2441cf176fcd4c6b51b8fded8620878e142285bN.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 61KB - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE