Behavioral task
behavioral1
Sample
1292933a197a9e8eaeef1360aa9a2b70N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
1292933a197a9e8eaeef1360aa9a2b70N.exe
Resource
win10v2004-20240802-en
General
-
Target
1292933a197a9e8eaeef1360aa9a2b70N.exe
-
Size
57KB
-
MD5
1292933a197a9e8eaeef1360aa9a2b70
-
SHA1
511ec16e2ad5928e1c0c6ac9122ee72a74b53352
-
SHA256
013c69e33004fe8aac6ce84a53fc9217c59f7cae7c17e49dbaad41c98617971f
-
SHA512
4973efe8ac0bfb25412e7ae4c7ec7f7c825ca1c9dd3e3273ddbde98a01d501eeef35db585dd890df46497d45f6df3abe3fbd2cf30b7bea27c5320536042052b6
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjyJJjtf8WUtf8WZCqCrY4YR:V7Zf/FAxTWoJJ2WjWZCqCG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1292933a197a9e8eaeef1360aa9a2b70N.exe
Files
-
1292933a197a9e8eaeef1360aa9a2b70N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE