Behavioral task
behavioral1
Sample
13b46c40cf40d05ce4d11cd28ea0e0d0N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
13b46c40cf40d05ce4d11cd28ea0e0d0N.exe
Resource
win10v2004-20240709-en
General
-
Target
13b46c40cf40d05ce4d11cd28ea0e0d0N.exe
-
Size
79KB
-
MD5
13b46c40cf40d05ce4d11cd28ea0e0d0
-
SHA1
89138ff550906d7d7681457885206ee26b389984
-
SHA256
89f90148a0d1a8997d81300c548ea5a688b90b873165df81b7d37c723450c307
-
SHA512
d2399d6832ce107be7ce798769d3e98b96d56e9652061df5b7a065cb2756f4d6b3d2aee69395c0965503a618ad7f902dfaa8b057547c62e2a25645851ed1e3f5
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKK0Sjb7Blpf/FAK65euBT37CPKK0SjY:V7Zf/FAxTWJ7Zf/FAxTWe
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13b46c40cf40d05ce4d11cd28ea0e0d0N.exe
Files
-
13b46c40cf40d05ce4d11cd28ea0e0d0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE