Behavioral task
behavioral1
Sample
1560a8ed37cc11bb73e0c3cfb525e670N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
1560a8ed37cc11bb73e0c3cfb525e670N.exe
Resource
win10v2004-20240709-en
General
-
Target
1560a8ed37cc11bb73e0c3cfb525e670N.exe
-
Size
67KB
-
MD5
1560a8ed37cc11bb73e0c3cfb525e670
-
SHA1
2261329cac1cc393d46e0efbf7db68cc894bd56b
-
SHA256
b26d069844d09eccac60a7a3212fe2c6a371a292a4b6813ffc5876a3a186f046
-
SHA512
c63517dd6c3963aa22a3652e985588f24fa96097d035b9903a6c2c739498247c6c72282375c0db23fbddc6ee8fecc93f3760b5c415e1d64b16e2d85a0b391052
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjyJJcbQbf1Oti1JGBQOOiQJhATNyCBT37CPKKdJA:V7Zf/FAxTWoJJZENTNyoTW7JJZENTNyu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1560a8ed37cc11bb73e0c3cfb525e670N.exe
Files
-
1560a8ed37cc11bb73e0c3cfb525e670N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE