Behavioral task
behavioral1
Sample
121c41c53692f43c0fd7057883562710N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
121c41c53692f43c0fd7057883562710N.exe
Resource
win10v2004-20240709-en
General
-
Target
121c41c53692f43c0fd7057883562710N.exe
-
Size
45KB
-
MD5
121c41c53692f43c0fd7057883562710
-
SHA1
44b6a6e635fa29897b41127f01c621aa9ca515c9
-
SHA256
77d262da33d54449f20f60d6ff76a63cb70b25e1057b78c7b1ceb9fc3deef160
-
SHA512
3190e0395893ff9ca95e7246c7e78777a110a033bbe8033bc636b8532068d577ae472c104e71b0a240d5845428b331a11e4db7c226a50b97e5d0406f671cb747
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjyJJcbQbf1Oti1JGBQOOiQJhATNyA:V7Zf/FAxTWoJJZENTNyA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 121c41c53692f43c0fd7057883562710N.exe
Files
-
121c41c53692f43c0fd7057883562710N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE