Behavioral task
behavioral1
Sample
11fd50497d65182202764cf5cc13a6bcbbdb77ae0cc103b98e5f43ff87c41812.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
11fd50497d65182202764cf5cc13a6bcbbdb77ae0cc103b98e5f43ff87c41812.exe
Resource
win10v2004-20240709-en
General
-
Target
11fd50497d65182202764cf5cc13a6bcbbdb77ae0cc103b98e5f43ff87c41812
-
Size
1.4MB
-
MD5
1cc74844307cf6107573ba85de10527d
-
SHA1
ed45d720ecb10dc22c0ae7471742f427d5760651
-
SHA256
11fd50497d65182202764cf5cc13a6bcbbdb77ae0cc103b98e5f43ff87c41812
-
SHA512
4bd56f7fe21ec565006e666e3145bbc3fe33d034122d654dc39904c33f8584e57a20fa41819b63ee47bcda89820d3a5089a8955867e643ee0362e71c5a828951
-
SSDEEP
24576:UAzhR80qqyFKk6VLVy0pWnUatmKfPx/Y1vxIqb+YIwQd74Z9Ruvywr0:BU161Vy0pIjtRZY1vxTaYIwlbRuvX0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11fd50497d65182202764cf5cc13a6bcbbdb77ae0cc103b98e5f43ff87c41812
Files
-
11fd50497d65182202764cf5cc13a6bcbbdb77ae0cc103b98e5f43ff87c41812.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 49KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE