Behavioral task
behavioral1
Sample
10560965e902873c35f7ecf60f504950N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
10560965e902873c35f7ecf60f504950N.exe
Resource
win10v2004-20240704-en
General
-
Target
10560965e902873c35f7ecf60f504950N.exe
-
Size
83KB
-
MD5
10560965e902873c35f7ecf60f504950
-
SHA1
94fdff786960d534d7a9343ac4864bde86fe4e35
-
SHA256
d6c01718e61d5084d99a5a2850d828e573e79465c9dab7b2c42fa618e26fc436
-
SHA512
7c7c7e3bc2c538e7b984f300f02012caac1fd988ec6d85198a0621fe07b22e5c5317a8764b584ac6a6d5c244d381bb4e05b20af49d456cf203d13a6a8b4760d5
-
SSDEEP
1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8s:fnyiQSoz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 10560965e902873c35f7ecf60f504950N.exe
Files
-
10560965e902873c35f7ecf60f504950N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE