Behavioral task
behavioral1
Sample
4408e999ef66712eed462a5a05fb39f0N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4408e999ef66712eed462a5a05fb39f0N.exe
Resource
win10v2004-20240709-en
General
-
Target
4408e999ef66712eed462a5a05fb39f0N.exe
-
Size
45KB
-
MD5
4408e999ef66712eed462a5a05fb39f0
-
SHA1
2a90f841de89a8cbbee6cabf4fd9919695de3c13
-
SHA256
b5c365479b9adee0822baaf9d9b5dd4cc7698ece4c099782326914aae9ad64fb
-
SHA512
783df2dd02ae7007a6f48ed342ba52d86a5892d5cb130b3ecec34d5879520e67d9d28f11a81c2fecc22d797b36516c89b26d86e278753223ecce79dd35533383
-
SSDEEP
384:ctqjHpWuChRbvyiUFLlklWx2RsTdUIH4OMLPmJoSSPD:ctqpC3bf2pklWxcY6IH4OML+WSI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4408e999ef66712eed462a5a05fb39f0N.exe
Files
-
4408e999ef66712eed462a5a05fb39f0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 688KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE