Behavioral task
behavioral1
Sample
94c7126f20d0f5a157285e04c7535220N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
94c7126f20d0f5a157285e04c7535220N.exe
Resource
win10v2004-20240709-en
General
-
Target
94c7126f20d0f5a157285e04c7535220N.exe
-
Size
44KB
-
MD5
94c7126f20d0f5a157285e04c7535220
-
SHA1
55e1c854e89d4c038ff070cb7a7a1ae05143ec19
-
SHA256
2fb9ca4e2e37ee7159870c258cf43006494997b7edecb8b51aa6c2e79a78099f
-
SHA512
79ef8dabda97d8d7d31cb7a3a6b6c7367c3007196b0e7cf1b8482123791ed8f8384ea591fe217d99ed98320e8ece9dd68b75df3ad96060addfd33c88c5e8eed6
-
SSDEEP
768:76Gh5nWLQF/NwwCvMAS50BQifgvYnbcuyD7Ue4D:76+5WLiVwt0YpfgvYnouy8e4D
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 94c7126f20d0f5a157285e04c7535220N.exe
Files
-
94c7126f20d0f5a157285e04c7535220N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
8xGaDB Size: 4.0MB - Virtual size: 224KB