Behavioral task
behavioral1
Sample
94793fef8ed3578ebbdadc672cac5300590d68d9272803513f53f7d0b5f90dce.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
94793fef8ed3578ebbdadc672cac5300590d68d9272803513f53f7d0b5f90dce.exe
Resource
win10v2004-20240508-en
General
-
Target
94793fef8ed3578ebbdadc672cac5300590d68d9272803513f53f7d0b5f90dce
-
Size
712KB
-
MD5
cd9827095197f2f59384c8e0e5683172
-
SHA1
fdae0af6bb042c12d17384c5c35c6b8054d1b551
-
SHA256
94793fef8ed3578ebbdadc672cac5300590d68d9272803513f53f7d0b5f90dce
-
SHA512
5158c4d02419bc83a294f722b3c8ef451fbffcc98ee4a59648981edc57775009ecbd1cac75f851ad34ab39e4c4be79ccd7bc8b662633abd0f3d65b9cb126134d
-
SSDEEP
12288:Fz/kaoDAqkOdmxluIOELtJbAb5gqJ1KZ0WvsxnUX63iz/XPvbG+O/r0G:+awkxxl/3Jk9emWvsxnUXzPjG+srT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 94793fef8ed3578ebbdadc672cac5300590d68d9272803513f53f7d0b5f90dce
Files
-
94793fef8ed3578ebbdadc672cac5300590d68d9272803513f53f7d0b5f90dce.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 699KB - Virtual size: 700KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ZyxWv7K Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Zephyr4 Size: 512B - Virtual size: 6B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ