Behavioral task
behavioral1
Sample
890bfde0918f6447618ff18b6b121b60N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
890bfde0918f6447618ff18b6b121b60N.exe
Resource
win10v2004-20240709-en
General
-
Target
890bfde0918f6447618ff18b6b121b60N.exe
-
Size
673KB
-
MD5
890bfde0918f6447618ff18b6b121b60
-
SHA1
40906cb627bc7f025c287d42e9f68701c61773e8
-
SHA256
59f6b6759554c03333197333c3f2129e11477c4f2de37a1f619e745bc5eb51f8
-
SHA512
f29670b438694f0ee2d06c8eead9f5d73b5ce09a919b442b8e2c6d6fd23f73eade4eac42735b84b94428b7244111479379fb1481a22903b7f04bec52fe2d349d
-
SSDEEP
6144:YhbZ5hMTNFf8LAurlEzAX7oEwfSZ4sXUzQI6FTBDcTd9hCovAXmbzu:2tXMzqrllX73wfEI6hBDeW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 890bfde0918f6447618ff18b6b121b60N.exe
Files
-
890bfde0918f6447618ff18b6b121b60N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 86KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE