Behavioral task
behavioral1
Sample
858d01fcf501c3001d265b4e204e1bcb1a4b466d39b3cac6cace061742573464.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
858d01fcf501c3001d265b4e204e1bcb1a4b466d39b3cac6cace061742573464.exe
Resource
win10v2004-20240508-en
General
-
Target
858d01fcf501c3001d265b4e204e1bcb1a4b466d39b3cac6cace061742573464
-
Size
942KB
-
MD5
6bc52987f05db485882ccb20fb47cb02
-
SHA1
5506f0918d2738c9cf84f01cb03304c6ea506377
-
SHA256
858d01fcf501c3001d265b4e204e1bcb1a4b466d39b3cac6cace061742573464
-
SHA512
2b647264307a7e413fabf8bf04e4ae7391cb187e0a7f692feedf88b6da1a9c8f0d4b1f8a97b699390be96e41d8595c4be33c91fbaf87ee53214d8886c422ca43
-
SSDEEP
12288:1neTqVah+bgN1M/81/eAvCYY70LvNOYIslY1XsiE5/Z+dKQyIBn:1eGEkeM/6eECYhNHJY18x54ZV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 858d01fcf501c3001d265b4e204e1bcb1a4b466d39b3cac6cace061742573464
Files
-
858d01fcf501c3001d265b4e204e1bcb1a4b466d39b3cac6cace061742573464.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 571KB - Virtual size: 572KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 369KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE