Behavioral task
behavioral1
Sample
06db7be35ad0ade1796c082791bb60c1554a3617da4275f07d6c84b62150b6baN.exe
Resource
win7-20240903-en
General
-
Target
06db7be35ad0ade1796c082791bb60c1554a3617da4275f07d6c84b62150b6baN.exe
-
Size
43KB
-
MD5
ec3763d2100d698f1c4ac10421a75ae0
-
SHA1
7b951726e328b76afc02e978efd766a992a4ea09
-
SHA256
06db7be35ad0ade1796c082791bb60c1554a3617da4275f07d6c84b62150b6ba
-
SHA512
50b39e31c876186c42b94506753e417543e2c1d0c614c1ad90ab2d42f65b353fc76ef0aa85da0d07321bcf887f51f633ca7a60260620556bd1cf48c94574cc57
-
SSDEEP
768:+U9XnKJv8KrtPNxT4oreP7cIK3yQpdk6x8pf9m4P/S0hVvIZiGDZ6RO8nHE8taqW:+U9abrtX4oocIK3yQkaY9z/S0hhy6k8Q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06db7be35ad0ade1796c082791bb60c1554a3617da4275f07d6c84b62150b6baN.exe
Files
-
06db7be35ad0ade1796c082791bb60c1554a3617da4275f07d6c84b62150b6baN.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 41KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE