Behavioral task
behavioral1
Sample
64d8f0b5c11fdd39b7697d3f9ab4a4f0N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
64d8f0b5c11fdd39b7697d3f9ab4a4f0N.exe
Resource
win10v2004-20240709-en
General
-
Target
64d8f0b5c11fdd39b7697d3f9ab4a4f0N.exe
-
Size
2.1MB
-
MD5
64d8f0b5c11fdd39b7697d3f9ab4a4f0
-
SHA1
a8397ad8ee7264feab73c9bddb02855ac7d854c0
-
SHA256
b9076275df4bdce65a8642e257e8efd7fc7cb2590297efe3fcbef8052f42e2da
-
SHA512
82ac7f165334f632521984746e41fe0022f3f2f8b47935fad5dadb2c1cc3b0fdc3054b04768a712143c281e29156824bd18e49ddefb61318fd3ca9ed86ae87b1
-
SSDEEP
49152:OlCOg2arHHMpyX69VYGfSq/o2DITtcUbPO3I:ROpgHspu6fP9Kt9bPUI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64d8f0b5c11fdd39b7697d3f9ab4a4f0N.exe
Files
-
64d8f0b5c11fdd39b7697d3f9ab4a4f0N.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.jxmnr Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.exjvk Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lpkez Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ