Behavioral task
behavioral1
Sample
161e277f28e23f744f9b7027f7005430N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
161e277f28e23f744f9b7027f7005430N.exe
Resource
win10v2004-20240730-en
General
-
Target
161e277f28e23f744f9b7027f7005430N.exe
-
Size
152KB
-
MD5
161e277f28e23f744f9b7027f7005430
-
SHA1
8ba51c4715ec1516b42ac686f46f3e923f37af73
-
SHA256
5baf31e1181671514106da19d6049afc7e2f6a074c3e131bcaefd25f93186dab
-
SHA512
88677ccb642843bb0d409ee26b944c826e763736252c6e653d7ca69e3dbda658b37ed73c848c28e808ebec3a5412efa321f8a7eaf7e8b625494d6867dee7c558
-
SSDEEP
1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8zxO7Zf/FAxTWY1++PJHJXA/OsIZfzc3V:fnyiQSoLnyiQSo6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 161e277f28e23f744f9b7027f7005430N.exe
Files
-
161e277f28e23f744f9b7027f7005430N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE