Behavioral task
behavioral1
Sample
450de31457f9e36585930db30fd69900N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
450de31457f9e36585930db30fd69900N.exe
Resource
win10v2004-20240709-en
General
-
Target
450de31457f9e36585930db30fd69900N.exe
-
Size
235KB
-
MD5
450de31457f9e36585930db30fd69900
-
SHA1
84e41b89e639cf57b5998f90eb72621f83a31d60
-
SHA256
c2bea00b8d91b80edf0b74e3f35ab341ea9a3e0d18561e66797113cdbb5847bf
-
SHA512
b392fc76d2465406e820b8a13d3e56ab96d92e583ff5859e8b5b6d2ecb6bf8d3120bc4e2311bb79f047a6571d678ab27e0e7d8925b1edaa47e69c9371c562971
-
SSDEEP
6144:6jluQoSFIo5R4nM/40yJoeNtC4rEjAgDSerqU2qeLJP+1gstTWEvh:6EQoSvqhoeNtCb5r+qAugsQEZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 450de31457f9e36585930db30fd69900N.exe
Files
-
450de31457f9e36585930db30fd69900N.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.btnj Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.s Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gduz Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gih Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fbe Size: 512B - Virtual size: 4KB
.pbws Size: 512B - Virtual size: 4KB
.asji Size: 512B - Virtual size: 4KB