Behavioral task
behavioral1
Sample
39088f28849f52d96d3496d84c3670310c80123063a6fa4c02ca73f299972c3f.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
39088f28849f52d96d3496d84c3670310c80123063a6fa4c02ca73f299972c3f.exe
Resource
win10v2004-20240704-en
General
-
Target
39088f28849f52d96d3496d84c3670310c80123063a6fa4c02ca73f299972c3f
-
Size
74KB
-
MD5
1be81a99c558f76c0f42ed800490b1ac
-
SHA1
8902222a7303143b19e5cfc58c4ad3c03e73b45d
-
SHA256
39088f28849f52d96d3496d84c3670310c80123063a6fa4c02ca73f299972c3f
-
SHA512
1fcad4af249d028a3a148d25e26b0b830a59d04d5bb3e3eecec253330c29b73569437672cafb642a93cc9cd71c5fb62fd7838e00631a65c1f700adda36dd9968
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjyJJBZBZyF/MF/5cycYBT37CPKKdJJBZBZyF/MF7:V7Zf/FAxTWoJJB7i25TW7JJB7i2d28
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39088f28849f52d96d3496d84c3670310c80123063a6fa4c02ca73f299972c3f
Files
-
39088f28849f52d96d3496d84c3670310c80123063a6fa4c02ca73f299972c3f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE