Behavioral task
behavioral1
Sample
070457b06c2e0740cb11381bcb5f72e0N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
070457b06c2e0740cb11381bcb5f72e0N.exe
Resource
win10v2004-20240709-en
General
-
Target
070457b06c2e0740cb11381bcb5f72e0N.exe
-
Size
44KB
-
MD5
070457b06c2e0740cb11381bcb5f72e0
-
SHA1
531bcc96ef243961ade006379ce71b7937d40f83
-
SHA256
d53d7a1046c508a9165121b9bd020e0bb80f0912d1598e276ab7cf4984ea2842
-
SHA512
5f102b710ab1aec39002ead1f5d62dc9ecf78d8f837bc00eb24f0178794a5a12876c4aa47f634a4ae4e6149ea9093bd3d542defd397e4d95ae24475d31dd8dde
-
SSDEEP
384:CxL+q5r+PpHfXhUkKvI4QwjQ/vFJhheJ06oZrj/vBKDJZJ/:ua4r+PpHfXGLOnNh8noR+P/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 070457b06c2e0740cb11381bcb5f72e0N.exe
Files
-
070457b06c2e0740cb11381bcb5f72e0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 11KB - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE