Behavioral task
behavioral1
Sample
638813da2d996b33932fbe01efc49bc0N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
638813da2d996b33932fbe01efc49bc0N.exe
Resource
win10v2004-20240802-en
General
-
Target
638813da2d996b33932fbe01efc49bc0N.exe
-
Size
53KB
-
MD5
638813da2d996b33932fbe01efc49bc0
-
SHA1
0927621ed446edb06094c0b90ae5ed4944fc82a1
-
SHA256
4a2a2cbb031e8ba128aa0d4a97ab7b3babd313d3a6b05b2a8c87a2441d274368
-
SHA512
060a5f4b65332c9587d900a2e7327a947fe45f5fb4b7aaa0c1ff52f3a8327d58036cafab67e591bb2e059dfeb3fad1494cecc6f1a20e7e7125539227fd181b3b
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjyJJcbQbf1Oti1JGBQOOiQJhATNydWK9WKF9ADJK:V7Zf/FAxTWoJJZENTNyoKIKMTr0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 638813da2d996b33932fbe01efc49bc0N.exe
Files
-
638813da2d996b33932fbe01efc49bc0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE