Behavioral task
behavioral1
Sample
744e8aa80821ff46a59bb2c3f11467052739ed9aa97ecaab38867b46d9472f27.exe
Resource
win7-20240903-en
General
-
Target
744e8aa80821ff46a59bb2c3f11467052739ed9aa97ecaab38867b46d9472f27.exe
-
Size
110KB
-
MD5
4842a2aadfae8ca21c5925adf1840845
-
SHA1
3734af895d63e0c464846c4a8b12dfa376b303fd
-
SHA256
744e8aa80821ff46a59bb2c3f11467052739ed9aa97ecaab38867b46d9472f27
-
SHA512
b3326bb68ab93fdddf0e421295cd2572a146c7d1b44710049e28084000a13b484de8b8b6c0669ea9c99639258fd9bee3014832d44325d861d2d72826253a6cbe
-
SSDEEP
1536:UiLOvRmmQegJfBbmAQ256/ZrwWnwqjhurmKFcxL8JQ2r0EQ:UiyvRmDLs/ZrwWJjAqGcRJ2hQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 744e8aa80821ff46a59bb2c3f11467052739ed9aa97ecaab38867b46d9472f27.exe
Files
-
744e8aa80821ff46a59bb2c3f11467052739ed9aa97ecaab38867b46d9472f27.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 61KB - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE