Behavioral task
behavioral1
Sample
f1ab5a6e77dc394aa58ef3472c926570N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
f1ab5a6e77dc394aa58ef3472c926570N.exe
Resource
win10v2004-20240709-en
General
-
Target
f1ab5a6e77dc394aa58ef3472c926570N.exe
-
Size
76KB
-
MD5
f1ab5a6e77dc394aa58ef3472c926570
-
SHA1
e4fbfe6a60d8646e6337780685377ee45c81abfb
-
SHA256
2abf352d0ae52662d78342d14638bf9834fe78b386ff4d46e2027ab2afa90559
-
SHA512
f47e142dc8936af358e40834fd528fab1442bdc90f26af705937158cdfe7c5979cc64f6abc2c9f3a6a3d41ca12514462d6ac84a16ece42d1dcc2c68b5ad42f74
-
SSDEEP
1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8wYM:fnyiQSodYM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f1ab5a6e77dc394aa58ef3472c926570N.exe
Files
-
f1ab5a6e77dc394aa58ef3472c926570N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE