Behavioral task
behavioral1
Sample
120ff0501d64acd61b54dc353cfea880N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
120ff0501d64acd61b54dc353cfea880N.exe
Resource
win10v2004-20240802-en
General
-
Target
120ff0501d64acd61b54dc353cfea880N.exe
-
Size
75KB
-
MD5
120ff0501d64acd61b54dc353cfea880
-
SHA1
17af298700cb76a75ae53cb377c88245217cd91b
-
SHA256
916ff9b4b58a31fe22c3c7e5000850be0e11b7b5ab371e8aea2e7da4d2c7a1de
-
SHA512
30b043c458370544c7c7497b03fd7347ff1835a9da628e47201b7f1037bc0a3082276cf4082f08901887b81c714da48bf9c7c2c7c0cd7e859132695ff5f66a3b
-
SSDEEP
1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+3:LJ0TAz6Mte4A+aaZx8EnCGVu3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 120ff0501d64acd61b54dc353cfea880N.exe
Files
-
120ff0501d64acd61b54dc353cfea880N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 82KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE