Behavioral task
behavioral1
Sample
c558b1e4540efc93e210ba101d07fbc0N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c558b1e4540efc93e210ba101d07fbc0N.exe
Resource
win10v2004-20240802-en
General
-
Target
c558b1e4540efc93e210ba101d07fbc0N.exe
-
Size
134KB
-
MD5
c558b1e4540efc93e210ba101d07fbc0
-
SHA1
0a843b7f2c581993c541e677b6cae10f6f3cd27c
-
SHA256
2074bcb792df1df6e1e70a9574157c88d8a46fb5b51095b33420b6edd5d7f5c6
-
SHA512
fa58fcaefb999f18953d5485955884e03cd1b1b0540e8fec4ec96ff2de1c0215d8dd225a36e1ffca349cd30e030fbff627ed2e05dcdfe322408055fa90f7c825
-
SSDEEP
3072:quH/RGfpO7StR9IMJEqOJ2LjU/2CHFuy1BKI6q1X41Ul:LfwpC1RbsjUuCHFuOKs1X41+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c558b1e4540efc93e210ba101d07fbc0N.exe
Files
-
c558b1e4540efc93e210ba101d07fbc0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 13.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 129KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE