Behavioral task
behavioral1
Sample
f0e5a4b2684c124f4c7dee3692059c4c46eb9609d046dfbc4f705a4227685f0f.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
f0e5a4b2684c124f4c7dee3692059c4c46eb9609d046dfbc4f705a4227685f0f.exe
Resource
win10v2004-20240508-en
General
-
Target
f0e5a4b2684c124f4c7dee3692059c4c46eb9609d046dfbc4f705a4227685f0f
-
Size
109KB
-
MD5
4d613c7129fc800da12a68b508f08151
-
SHA1
ebef14bf7299935b1d4ba117de974e1873fa2ad1
-
SHA256
f0e5a4b2684c124f4c7dee3692059c4c46eb9609d046dfbc4f705a4227685f0f
-
SHA512
b11cfbf6697e4b7215c24756d477cfca09d64aa14a56206bd261fa75f87c374612336b1f9642e9af33fcc7e61190f3bff441dfd19c45a85454ae901e02f1260e
-
SSDEEP
1536:a7ZyqaFAxTWbJJB7LDKTW7JJB7LDJ7ZyqaFAxTWbJJB7LDKTW7JJB7LDL:enay2tDptDznay2tDptDL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0e5a4b2684c124f4c7dee3692059c4c46eb9609d046dfbc4f705a4227685f0f
Files
-
f0e5a4b2684c124f4c7dee3692059c4c46eb9609d046dfbc4f705a4227685f0f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE