Behavioral task
behavioral1
Sample
902e62343b6b9b564901604646a2ef789d2de6a35ffb30aee6e27108e5fc8ae0.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
902e62343b6b9b564901604646a2ef789d2de6a35ffb30aee6e27108e5fc8ae0.exe
Resource
win10v2004-20240508-en
General
-
Target
902e62343b6b9b564901604646a2ef789d2de6a35ffb30aee6e27108e5fc8ae0
-
Size
589KB
-
MD5
ca8a604166dbc13b14486784097640ee
-
SHA1
bc5b9c610c7f0450eb0dfd6738937bd4843ca54a
-
SHA256
902e62343b6b9b564901604646a2ef789d2de6a35ffb30aee6e27108e5fc8ae0
-
SHA512
737b52e2958ff5cca57f4d092d6c804dde08db6f3370ae1b6df749c37e6cc0cb30c75b790bf7cbae1f5e1e1133da77a25d265443768777398703ac35af0d7393
-
SSDEEP
12288:R7gyjzuG6/oNMPLo5INrsHXAF87X0cSi9+jTV3oHyJDLvPRprSMEM5kRww:5gyjaxRNrO6oXb9+fNoYvJpUww
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 902e62343b6b9b564901604646a2ef789d2de6a35ffb30aee6e27108e5fc8ae0
Files
-
902e62343b6b9b564901604646a2ef789d2de6a35ffb30aee6e27108e5fc8ae0.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 748KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 573KB - Virtual size: 576KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE