Behavioral task
behavioral1
Sample
387d5922732b7af75ce3a641aeed63f0N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
387d5922732b7af75ce3a641aeed63f0N.exe
Resource
win10v2004-20240709-en
General
-
Target
387d5922732b7af75ce3a641aeed63f0N.exe
-
Size
135KB
-
MD5
387d5922732b7af75ce3a641aeed63f0
-
SHA1
0ad549d1f820a371a46c31dce8e3c8d71fea66e9
-
SHA256
b6fbda1e9ef94da92527986a15b37aafca060bbfe81622a005a7d6e84d7446f8
-
SHA512
0d390f41b4e29dcb3bb6c731eb128216bcf7c8f7969dc5e86eb499ccd6b9d13470ba2c002d2c2519db0c0e9404ccd7440a62b77dcbe5a90fc8d0c4c64dce44d6
-
SSDEEP
1536:cGYU/W2/HG6QMauSV3ixJHABLrmhH7i99ROOg00GqMIK7aGZh3EIe:cfU/WF6QMauSuiWNi97Ol0007NZ6Ie
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 387d5922732b7af75ce3a641aeed63f0N.exe
Files
-
387d5922732b7af75ce3a641aeed63f0N.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 64KB - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE