Behavioral task
behavioral1
Sample
57086363bda4e65d804b56f3b4e5b9a0N.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
57086363bda4e65d804b56f3b4e5b9a0N.exe
Resource
win10v2004-20240802-en
General
-
Target
57086363bda4e65d804b56f3b4e5b9a0N.exe
-
Size
7.7MB
-
MD5
57086363bda4e65d804b56f3b4e5b9a0
-
SHA1
03a93648dc5a2186b4c9eb8faaa9daab4b1d5ca2
-
SHA256
940b3e9b364cd5cbfbc0fca02109a882b54fbdb69af60655acf0b341e875384c
-
SHA512
4948f72a19533f84c2283ff2eaccdd60ba534dc99e0e449a7bc6a17f73c64ecf53fd268e6fc742455392df9121229c21217318dc426353c272803d3e464f5569
-
SSDEEP
196608:yBNfZ9TZYEkexe3M+K3quo6dB8lK+HpXQ5gUX33xW0YYX6:yBNB9T2Ekce3M+cquoeGTHUgUBP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 57086363bda4e65d804b56f3b4e5b9a0N.exe
Files
-
57086363bda4e65d804b56f3b4e5b9a0N.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 23.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7.6MB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE