Behavioral task
behavioral1
Sample
322990fa4bd60b0d3a2df87c3543f82bc5e3825f8357eb27a2d80aab0969afa4.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
322990fa4bd60b0d3a2df87c3543f82bc5e3825f8357eb27a2d80aab0969afa4.exe
Resource
win10v2004-20240508-en
General
-
Target
322990fa4bd60b0d3a2df87c3543f82bc5e3825f8357eb27a2d80aab0969afa4
-
Size
1.9MB
-
MD5
d467f4e3d950cffad657af67e9844f6b
-
SHA1
023324332ec3437e9eeaa512318c2b62dcf18296
-
SHA256
322990fa4bd60b0d3a2df87c3543f82bc5e3825f8357eb27a2d80aab0969afa4
-
SHA512
e79209661464aaeb0374e4d9694efd519aaf6a978e30d3e8318c45bc3ac47de57fa81230f56b85a14ddf9967f22a92d8267cc9ffb33f681d20c1f551181d8050
-
SSDEEP
24576:UvxlJ9d6IscEUIUH0JCYcQb4uTtyaXWnjovY+1N9f2+W4upMtMAHn8J+RgBbN89i:ULJ96cZH08mr0AWknUxmQlbN+cf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 322990fa4bd60b0d3a2df87c3543f82bc5e3825f8357eb27a2d80aab0969afa4
Files
-
322990fa4bd60b0d3a2df87c3543f82bc5e3825f8357eb27a2d80aab0969afa4.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 235KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE