Behavioral task
behavioral1
Sample
931e566eb4ee068c2963b82d7aa5a7e0N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
931e566eb4ee068c2963b82d7aa5a7e0N.exe
Resource
win10v2004-20240709-en
General
-
Target
931e566eb4ee068c2963b82d7aa5a7e0N.exe
-
Size
1006KB
-
MD5
931e566eb4ee068c2963b82d7aa5a7e0
-
SHA1
3255f13902dc8b1187c52caa9c67d713e8844dd8
-
SHA256
bbecc1d3ff45fc3d5b9d2649f2d1dd7e8e363db46a42d2c085aa226ac26fa230
-
SHA512
db3a171c05fe592fd2ab47558dc79f935d2b73f20ee3545731477d7722269902ebd5a639c4179b6ef80e75724de96df84d07413278ae7377bdbfb4a4b4f83348
-
SSDEEP
24576:NSLMlGhxx46grrukF8v83lk8bjO178niM1pmJY:N5Gjx9grruE8vyjO178niBJY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 931e566eb4ee068c2963b82d7aa5a7e0N.exe
Files
-
931e566eb4ee068c2963b82d7aa5a7e0N.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bvxzt Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yno Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vzkj Size: 512B - Virtual size: 4KB
.lygia Size: 512B - Virtual size: 4KB
.o Size: 512B - Virtual size: 4KB