Behavioral task
behavioral1
Sample
62391fbaa0d0e46c67251fd619aee9a0N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
62391fbaa0d0e46c67251fd619aee9a0N.exe
Resource
win10v2004-20240709-en
General
-
Target
62391fbaa0d0e46c67251fd619aee9a0N.exe
-
Size
135KB
-
MD5
62391fbaa0d0e46c67251fd619aee9a0
-
SHA1
d3d76268791614bc68dbb3d7f687a4f72292724c
-
SHA256
6abeeb20359fa1417e7e8e7c4d932d4fca5b2700e395eb18ef700a6f7f0df38e
-
SHA512
13e2331911e8c7dfcc660673a0da20820f1231aecaad7a1dd8a9986406f4ed77fc9e13b92d4a8443b4e9ee35728e84b142e9530fafa6ec80882c00546c61785e
-
SSDEEP
3072:fny1tE+ZiztVuPneKjNObRN9WEsA6fFgrmhNXVOf:KbEIPnRij6fk40
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 62391fbaa0d0e46c67251fd619aee9a0N.exe
Files
-
62391fbaa0d0e46c67251fd619aee9a0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE