Behavioral task
behavioral1
Sample
475c269d57b250f964a187d5b652d7e0N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
475c269d57b250f964a187d5b652d7e0N.exe
Resource
win10v2004-20240709-en
General
-
Target
475c269d57b250f964a187d5b652d7e0N.exe
-
Size
41KB
-
MD5
475c269d57b250f964a187d5b652d7e0
-
SHA1
8cea20a74b8f3a289951da0eec5390b59920edf1
-
SHA256
b2f0885f814f7d045ebaff99ff10e69c2058539c7b2653542b39a607c0fd1293
-
SHA512
0e52763edb8deff65cb16523a1ba91dbec1e56b9b8848c988edfd1a2216eab4a8e9cbcf3f5ae89feab12ba8d054058b15dd457d6f77942a231709886e9e1f335
-
SSDEEP
768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/:AEwVs+0jNDY1qi/q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 475c269d57b250f964a187d5b652d7e0N.exe
Files
-
475c269d57b250f964a187d5b652d7e0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 511B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE