Behavioral task
behavioral1
Sample
239d09e276eac2116963f3843e437cecdf1fe9f2b81b722de955b81cb814f0b2.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
239d09e276eac2116963f3843e437cecdf1fe9f2b81b722de955b81cb814f0b2.exe
Resource
win10v2004-20240730-en
General
-
Target
239d09e276eac2116963f3843e437cecdf1fe9f2b81b722de955b81cb814f0b2
-
Size
655KB
-
MD5
525c22c2f61b51553e57c91f50744a44
-
SHA1
60b17d13cc62363cc7099e385912ab74efeb0f4a
-
SHA256
239d09e276eac2116963f3843e437cecdf1fe9f2b81b722de955b81cb814f0b2
-
SHA512
5315ea2d164d9f71789b761fc3f7002d5afb433efa68caab5e0a3c0284abe6f1f5ca3ff6c1c85c440a4627f414ba8def18ba50b6597cebda79a73a430c1c8856
-
SSDEEP
12288:SKg71yAoHNWR8bTH7MrcuWE/wove/j24yu/ATnZuPESLnV+pFl:1HNJDMor12mquPZjqL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 239d09e276eac2116963f3843e437cecdf1fe9f2b81b722de955b81cb814f0b2
Files
-
239d09e276eac2116963f3843e437cecdf1fe9f2b81b722de955b81cb814f0b2.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 3.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 653KB - Virtual size: 656KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE