Behavioral task
behavioral1
Sample
499497eb0b313f9acc8c6b5f0d493d00N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
499497eb0b313f9acc8c6b5f0d493d00N.exe
Resource
win10v2004-20240802-en
General
-
Target
499497eb0b313f9acc8c6b5f0d493d00N.exe
-
Size
196KB
-
MD5
499497eb0b313f9acc8c6b5f0d493d00
-
SHA1
98524b17547455f007eda62522841433b43060af
-
SHA256
e90d30455cb81e4e9c86efc71795ea8d0515ba3ca09db7fc772370b80ad3c499
-
SHA512
0345157e3a68b25aa2cae46c05e2df24e8c4c0afb06d4d2eb5d28a99e528eb3a93def313a264b9feb93691d7cf0092f051aa1c83bbbcebccae8fad2128d5a5c7
-
SSDEEP
3072:ZOgUXoutNAxZVX4/awxfodLJUBv9Bsor1rHjhMU9npQQpmuG:ZFYoS2RARoYlld9n2Qpmx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 499497eb0b313f9acc8c6b5f0d493d00N.exe
Files
-
499497eb0b313f9acc8c6b5f0d493d00N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 140KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE