Behavioral task
behavioral1
Sample
12440e14c2ea012639fbdf5c62718eb0N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
12440e14c2ea012639fbdf5c62718eb0N.exe
Resource
win10v2004-20240709-en
General
-
Target
12440e14c2ea012639fbdf5c62718eb0N.exe
-
Size
61KB
-
MD5
12440e14c2ea012639fbdf5c62718eb0
-
SHA1
2f0e0f2f21a389300f1895e20d8b1ba036fa30ad
-
SHA256
87339f4d6151896ee7dc085f51197f7beead2fbff0643e987e5f627e1f187496
-
SHA512
c2acae2cadfa16e8e5e2608ab97b14f0bb62b3375b538429ed5c877e23fbf3d97eb7329744741e6a79a72275f7fe8d0db6c40f453b769e9893c1ad83c33077ea
-
SSDEEP
768:67Blpf/FAK65euBT37CPKK0SjHm0CAbLg++PJHJzIWD+dVdCYgck5sIZFvxiP7MD:67Zf/FAxTWY1++PJHJXA/OsIZ9xilxij
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12440e14c2ea012639fbdf5c62718eb0N.exe
Files
-
12440e14c2ea012639fbdf5c62718eb0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE