Behavioral task
behavioral1
Sample
1978067cb95e93001fea600ea3a534a0N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
1978067cb95e93001fea600ea3a534a0N.exe
Resource
win10v2004-20240709-en
General
-
Target
1978067cb95e93001fea600ea3a534a0N.exe
-
Size
69KB
-
MD5
1978067cb95e93001fea600ea3a534a0
-
SHA1
0530d5989601e144a6ec2b68856195fd6d324019
-
SHA256
a482496b038ce35ab9873e1d63bd246a69fe287a5f8bdd31dd4b389ee2e23a49
-
SHA512
6c2d448f87c98a3900119d516360e61c52ac18aa9a0a54cf0fe83e2927195ee93e1391d5e1a8915dbfa49696bc906e6dd5d8d52c7cfde1ebbb85afc787ef23b4
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjyJJjtf8WUtf8WGoj9COieQJfoj9COieQJshd/Q5:V7Zf/FAxTWoJJ2WjWpf1f3hvdE1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1978067cb95e93001fea600ea3a534a0N.exe
Files
-
1978067cb95e93001fea600ea3a534a0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE