Behavioral task
behavioral1
Sample
2465b830167fe18df6c61e96969034d0N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2465b830167fe18df6c61e96969034d0N.exe
Resource
win10v2004-20240802-en
General
-
Target
2465b830167fe18df6c61e96969034d0N.exe
-
Size
62KB
-
MD5
2465b830167fe18df6c61e96969034d0
-
SHA1
9621e9ec0c228e4d2f056e8e304f47a21da01fab
-
SHA256
be9943b8fbfe3015bb793fe071e1f80fbc5ab87e4794a3398fefe37cc37b6161
-
SHA512
92a2604e6b2a37201aa462035ecbb1d02c759e331b2601ecac4931b88364201390db19b566c2b8baa6196caefaa68edc23958745dd631e6ff328f3b139f35b1d
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjyJJCBT37CPKKdJJ1EXBwzEXBwxjM2jMCKAJxaKa:V7Zf/FAxTWoJJoTW7JJfI2Iv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2465b830167fe18df6c61e96969034d0N.exe
Files
-
2465b830167fe18df6c61e96969034d0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE