Behavioral task
behavioral1
Sample
10735dd870ded1abf3552f658f3368810b8ccd9b7278dfe9587f9f837f3d11a6.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
10735dd870ded1abf3552f658f3368810b8ccd9b7278dfe9587f9f837f3d11a6.exe
Resource
win10v2004-20231215-en
General
-
Target
10735dd870ded1abf3552f658f3368810b8ccd9b7278dfe9587f9f837f3d11a6
-
Size
45KB
-
MD5
977a7126ef8474adc57ce53f19a1a52a
-
SHA1
7dabf488d12231af993f432b9548d8dd427298ce
-
SHA256
10735dd870ded1abf3552f658f3368810b8ccd9b7278dfe9587f9f837f3d11a6
-
SHA512
4daa4706400e11fd3ee78bb49b18f700357b78ca3087fd2cee98b177b2ed018eca3a2e68a671450103676c8ee4c236b2746d011aa0c9a6ed6c87884b85f7bb89
-
SSDEEP
768:kvQB0ESOGg1UrYShBbgrrMo98l4yOoBDqANhN5yAXQedrbIg+2yodrR4GwqVHCfJ:kvQBeOGtrYS3srx93UBWQ5yAXNlIQldu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 10735dd870ded1abf3552f658f3368810b8ccd9b7278dfe9587f9f837f3d11a6
Files
-
10735dd870ded1abf3552f658f3368810b8ccd9b7278dfe9587f9f837f3d11a6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE