Behavioral task
behavioral1
Sample
0e0074696f835f9878604a55fa3c9fb0N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
0e0074696f835f9878604a55fa3c9fb0N.exe
Resource
win10v2004-20240802-en
General
-
Target
0e0074696f835f9878604a55fa3c9fb0N.exe
-
Size
655KB
-
MD5
0e0074696f835f9878604a55fa3c9fb0
-
SHA1
7dbf08d3780fce683ecd01abb7bff2588c9d91aa
-
SHA256
bc3db5a35e04b256d35e58a2c0d72bc62dd9a95e292e044226cbc44a2d21c4bb
-
SHA512
7513571b9de56928044d6f3aeec3c2623552002935bcacc3934fa185fa49e7bcff8628c5f6163e352c5423b5b1c519a6d40601af58cdb8d7089d12761e229c96
-
SSDEEP
12288:SKg71yAoHNWR8bTH7MrcuWE/wove/j24yu/ATnZuPESLnV+pFm:1HNJDMor12mquPZjqM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e0074696f835f9878604a55fa3c9fb0N.exe
Files
-
0e0074696f835f9878604a55fa3c9fb0N.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 3.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 653KB - Virtual size: 656KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE