Behavioral task
behavioral1
Sample
15c4344fe3b151ac1aa667cb436a48d0N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
15c4344fe3b151ac1aa667cb436a48d0N.exe
Resource
win10v2004-20240802-en
General
-
Target
15c4344fe3b151ac1aa667cb436a48d0N.exe
-
Size
63KB
-
MD5
15c4344fe3b151ac1aa667cb436a48d0
-
SHA1
d704c8cc2e888c2058922f7454f5cc2c86ef4c87
-
SHA256
4f0774b2166311d426052d0e6f27e2c10261c2729d9cb0b381dd2d7c49589114
-
SHA512
e78eb35a4de2bc8cc4227c3febb0eb5bf86803285f0825260b124a25e004b823083d71da7518c25d0f7920d3e4fbd552afe6362412a61adbb6d0e0069f43501f
-
SSDEEP
768:a7BlpyqaFAK65euBT37CPKKDm7EJJcbQbf1Oti1JGBQOOiQJhATBHfBo8o3PHc6:a7ZyqaFAxTWbJJZENTBHfiPHc6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15c4344fe3b151ac1aa667cb436a48d0N.exe
Files
-
15c4344fe3b151ac1aa667cb436a48d0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE