Behavioral task
behavioral1
Sample
da7b4a8c90f0dd9dc82881ae9dda9ab0N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
da7b4a8c90f0dd9dc82881ae9dda9ab0N.exe
Resource
win10v2004-20240709-en
General
-
Target
da7b4a8c90f0dd9dc82881ae9dda9ab0N.exe
-
Size
435KB
-
MD5
da7b4a8c90f0dd9dc82881ae9dda9ab0
-
SHA1
190b0193bbfda665e0d244e39eff40285c2d92a5
-
SHA256
424931b97426a4624d015372a440109ccb1a06c075a5483b45150b6e3bb11d6c
-
SHA512
13cb76391840d82a447ddaddd490be597aeb16e295134a158d3ddd4cf119a1cc744b8f032c6de6f7036a0d9b738894af6488549d32964d1502ea17544fa74837
-
SSDEEP
12288:VQtNOtRRRFuqeFRJ4RRRy8aiiiihmquUiiiBVk1iiiiibbRYvuNqqP9mGr:VINOtRRRFuqERJ4RRRbaiiiihmquUiiY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource da7b4a8c90f0dd9dc82881ae9dda9ab0N.exe
Files
-
da7b4a8c90f0dd9dc82881ae9dda9ab0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE