Behavioral task
behavioral1
Sample
30e93c6d5e6f24f7184b72af6ea354cb43354f3b17cb3eef989aee61a7aa5953.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
30e93c6d5e6f24f7184b72af6ea354cb43354f3b17cb3eef989aee61a7aa5953.exe
Resource
win10v2004-20230703-en
General
-
Target
30e93c6d5e6f24f7184b72af6ea354cb43354f3b17cb3eef989aee61a7aa5953
-
Size
43KB
-
MD5
3e1e7aaa071a44c3459eb7bef24aca4f
-
SHA1
a251ede9ecc8f4be1118bd58baba37b7ffaa9d6f
-
SHA256
30e93c6d5e6f24f7184b72af6ea354cb43354f3b17cb3eef989aee61a7aa5953
-
SHA512
cdd3fc38b7a24905c9ad0fd9b75891076b5bc231c06a5419961b5755c3d246ef53cdfe8b2f0f0703730f2ed6e54ca436db38e09ab4bc2372fda67d29035a17f3
-
SSDEEP
768:DKthRRwe4PumQcnR7yAJpa2uO+3RQz6XBNQOGgo7iurnbcuyD7U:GW9v/nUMa7DOz6XBNsTnouy8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30e93c6d5e6f24f7184b72af6ea354cb43354f3b17cb3eef989aee61a7aa5953
Files
-
30e93c6d5e6f24f7184b72af6ea354cb43354f3b17cb3eef989aee61a7aa5953.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 41KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE