Behavioral task
behavioral1
Sample
34242119ba71c5faa539dc312df268d88a8ed0b110a9d5846286ed34f6cb32ad.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
34242119ba71c5faa539dc312df268d88a8ed0b110a9d5846286ed34f6cb32ad.exe
Resource
win10v2004-20240709-en
General
-
Target
34242119ba71c5faa539dc312df268d88a8ed0b110a9d5846286ed34f6cb32ad
-
Size
53KB
-
MD5
07a2b2142f9cbc7b98f2bccfaa052d2e
-
SHA1
d0213f75e3571eeb5b3bf519ff48adbf06c34e55
-
SHA256
34242119ba71c5faa539dc312df268d88a8ed0b110a9d5846286ed34f6cb32ad
-
SHA512
8c70ab0ae7c3f3c6d7417abe6275d8e3c549eb434145b8b418a4706f7cb00190e4f07bf7eac9f7d705293e73f64ae1f02976e75cdca3c0fd43912d3100a707b9
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjSEXBwzEXBw3sgQw58eGkz2rcuesgQw58eGkz2rK:V7Zf/FAxTWh6n
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 34242119ba71c5faa539dc312df268d88a8ed0b110a9d5846286ed34f6cb32ad
Files
-
34242119ba71c5faa539dc312df268d88a8ed0b110a9d5846286ed34f6cb32ad.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE