Behavioral task
behavioral1
Sample
785a8308cb11614a6010dd39d7fe2560N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
785a8308cb11614a6010dd39d7fe2560N.exe
Resource
win10v2004-20240709-en
General
-
Target
785a8308cb11614a6010dd39d7fe2560N.exe
-
Size
1.3MB
-
MD5
785a8308cb11614a6010dd39d7fe2560
-
SHA1
35011021f517dbbc18639a542ad526213869abf0
-
SHA256
1a29ac37d74dea67671d868e864da84cf10182c0efa2c6feded420bde4d33673
-
SHA512
3c7ae9cb1e8ed9b9d642e19e42b0e6bc77c5b0f06a51cd92fbe8006c82e7316fbbbafcb48ffd44bf35f39ea26644a894970cec10f24d02207cd409aa4c3b3ce8
-
SSDEEP
24576:60EhBg42qkJhjt2sMHsx3e+NIRldAStkpzAZWkfiFXJJcM5aNud9y+VKAbzjzaS/:BE3DkJhjt2sKBCp+fi5JJc8Q+wAbGq7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 785a8308cb11614a6010dd39d7fe2560N.exe
Files
-
785a8308cb11614a6010dd39d7fe2560N.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.btnj Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.s Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gduz Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gih Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fbe Size: 512B - Virtual size: 4KB
.pbws Size: 512B - Virtual size: 4KB
.asji Size: 512B - Virtual size: 4KB