Behavioral task
behavioral1
Sample
f38f2e95bb4647afc86aaa3aec280980d82abd5662562ab32c8f05001614e327.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
f38f2e95bb4647afc86aaa3aec280980d82abd5662562ab32c8f05001614e327.exe
Resource
win10v2004-20240730-en
General
-
Target
f38f2e95bb4647afc86aaa3aec280980d82abd5662562ab32c8f05001614e327
-
Size
1.1MB
-
MD5
166b2b7fafb6ccc605f7629046430412
-
SHA1
359e3c9291c9e3a6bf71b20310df2a776d1da256
-
SHA256
f38f2e95bb4647afc86aaa3aec280980d82abd5662562ab32c8f05001614e327
-
SHA512
aa188bbdfbda7c1186b9b4c17c18b5030d187cecd0be6167e7ef4872e82a8665f9d6b9fe56efb8e107eadf96a79de73b69e2b9fce83f31a37a2421cfdf27ac83
-
SSDEEP
24576:bSLfsaWd8MYlyk/w8UDOFiLs+ixvCIxDRSB3WCxM:bPqxIaiY183WaM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f38f2e95bb4647afc86aaa3aec280980d82abd5662562ab32c8f05001614e327
Files
-
f38f2e95bb4647afc86aaa3aec280980d82abd5662562ab32c8f05001614e327.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bvxzt Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yno Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vzkj Size: 512B - Virtual size: 4KB
.kemyz Size: 512B - Virtual size: 4KB