Behavioral task
behavioral1
Sample
b182624aa713f0c9e132740d40e4de70N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b182624aa713f0c9e132740d40e4de70N.exe
Resource
win10v2004-20240709-en
General
-
Target
b182624aa713f0c9e132740d40e4de70N.exe
-
Size
56KB
-
MD5
b182624aa713f0c9e132740d40e4de70
-
SHA1
1d06e4716563e118d4c3157c4aab47141de7023e
-
SHA256
cac400c5d93fdc702790b84a125170328c2e8af648d668754ed4d0cb2016684b
-
SHA512
fa6abfccb45fee5751ae66aa7bd31feb1aace9987d844e12ccf6f55914318bfe3cf6831e2c04db7a6725c3672dc2bd80339f061d2b67ebd2257a60e982ec33a8
-
SSDEEP
1536:a7ZyqaFAxTWbJJB7LDKTW7JJB7LDpDtUpCUpe:enay2tDptDpDd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b182624aa713f0c9e132740d40e4de70N.exe
Files
-
b182624aa713f0c9e132740d40e4de70N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE