Behavioral task
behavioral1
Sample
398f515d382f1921c6fd0d7874d2c24ccc9e4bcac5540a1945cab98e117aafc1.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
398f515d382f1921c6fd0d7874d2c24ccc9e4bcac5540a1945cab98e117aafc1.exe
Resource
win10v2004-20240704-en
General
-
Target
398f515d382f1921c6fd0d7874d2c24ccc9e4bcac5540a1945cab98e117aafc1.exe
-
Size
1.8MB
-
MD5
97a864d059cc901afdb287eeab4665f0
-
SHA1
70609341efcdf58bd126addff075e3b477f3497f
-
SHA256
398f515d382f1921c6fd0d7874d2c24ccc9e4bcac5540a1945cab98e117aafc1
-
SHA512
70cde0684a465d226cbe5608c2d9959ee4d466d77d9ccd8617c002be86c66f5e30392df7386144a8fad468d61bf07eba4e0ef6e408eae5283ca70e7e9ffeb9b7
-
SSDEEP
49152:uhAPlf1I7cfA/p9raJYxxyxw/T9P9XyIrOXkG:2APlG2A//23kcx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 398f515d382f1921c6fd0d7874d2c24ccc9e4bcac5540a1945cab98e117aafc1.exe
Files
-
398f515d382f1921c6fd0d7874d2c24ccc9e4bcac5540a1945cab98e117aafc1.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
8xGaDB Size: 388KB - Virtual size: 224KB