Behavioral task
behavioral1
Sample
89f023a7a90ec09ac8455110075a5ee0N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
89f023a7a90ec09ac8455110075a5ee0N.exe
Resource
win10v2004-20240709-en
General
-
Target
89f023a7a90ec09ac8455110075a5ee0N.exe
-
Size
1.7MB
-
MD5
89f023a7a90ec09ac8455110075a5ee0
-
SHA1
671bde21a43ef5a1cf7ef7a09ab3bfe67a075a0d
-
SHA256
fa37a7e232a82d4d47c679b830ff6155d020fc6a770c076731564ec084e84b6c
-
SHA512
4e242abeaf3b350585a815fab217f81cf27c87c26ddf3ae44fd93020a7b432a5b7b716a7a033ad5dd3d4ec79c1864adfd59f422cd4b2a452ee7a737b92c28b38
-
SSDEEP
49152:br2G8tKR0Fdk8SJVq1RGIntL+mUfNDmfoKI:bSrh1SJIXGInBeNaf/I
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89f023a7a90ec09ac8455110075a5ee0N.exe
Files
-
89f023a7a90ec09ac8455110075a5ee0N.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bvxzt Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yno Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vzkj Size: 512B - Virtual size: 4KB
.kemyz Size: 512B - Virtual size: 4KB