Behavioral task
behavioral1
Sample
0988b5532a47fd87a6993b15b4679500N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
0988b5532a47fd87a6993b15b4679500N.exe
Resource
win10v2004-20240709-en
General
-
Target
0988b5532a47fd87a6993b15b4679500N.exe
-
Size
59KB
-
MD5
0988b5532a47fd87a6993b15b4679500
-
SHA1
8a51bf8dd7668ab4964e79ebbb0e47d515fb80e4
-
SHA256
d9c727b58f65bd9a37155b760078d827b0d444769ec055cfae7b3d0889205779
-
SHA512
351a7ee29dc5177a6780d843190329a15e2d92e63713d4eba8f0a3c7141614d4b2ca9399d0e05c8efd993df88575a192cd1facb7945d6d0a4b1489f5967e81b4
-
SSDEEP
1536:14vnuZU68CrFQmhRYJtgQJJfJc425qIAoW5kDZ:UuKUr2mTAgMujIaW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0988b5532a47fd87a6993b15b4679500N.exe
Files
-
0988b5532a47fd87a6993b15b4679500N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 176KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 58KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE