Behavioral task
behavioral1
Sample
0326065c80ff3394f1926722efa3b8a19f0447467b9d7f7877d8f35438c9d38a.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
0326065c80ff3394f1926722efa3b8a19f0447467b9d7f7877d8f35438c9d38a.exe
Resource
win10v2004-20240508-en
General
-
Target
0326065c80ff3394f1926722efa3b8a19f0447467b9d7f7877d8f35438c9d38a
-
Size
7.3MB
-
MD5
779050305162e744998e7301023b38c1
-
SHA1
fabe64ac3356545e23acf3a96512a74c78e22f3e
-
SHA256
0326065c80ff3394f1926722efa3b8a19f0447467b9d7f7877d8f35438c9d38a
-
SHA512
def74331d66782376e1c75720e5c3018fc7bfa3809244efc049a28a95f11702ab5439b2503e6f8e98e175a5ca005ca77c80ea82362ab263cb811d6f208ae2beb
-
SSDEEP
196608:I9jL4mxSudYI/JXNhOZc8pY/7ZBPVKpKevWp:GX4mxZdJ/Hx//N92KeO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0326065c80ff3394f1926722efa3b8a19f0447467b9d7f7877d8f35438c9d38a
Files
-
0326065c80ff3394f1926722efa3b8a19f0447467b9d7f7877d8f35438c9d38a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 7.3MB - Virtual size: 7.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE