Behavioral task
behavioral1
Sample
673bb36ef92e617c99e63c2a018dc3e9869ad6592b400d9a1b5c0be3e1734f04.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
673bb36ef92e617c99e63c2a018dc3e9869ad6592b400d9a1b5c0be3e1734f04.exe
Resource
win10v2004-20240802-en
General
-
Target
673bb36ef92e617c99e63c2a018dc3e9869ad6592b400d9a1b5c0be3e1734f04
-
Size
59KB
-
MD5
5ad8a7be4e0b46ab341d3aa4855622b1
-
SHA1
f924e849a129f60debe925547256d2b71e7b2e70
-
SHA256
673bb36ef92e617c99e63c2a018dc3e9869ad6592b400d9a1b5c0be3e1734f04
-
SHA512
0c87e8d6750edc0950e07329da7397cdb73fb2901ccf8701da02d127604eb5764fb70f0b85549a294eaece7e48e93ad69719acf14ad449c04f9c3a2053fabe90
-
SSDEEP
1536:3+ZgwRdiE8cO4p1xRjfTvSq5r3ZiIZ4nouy8uh1aQp:OeodiUO4p13b9HiIeoutuh1aQp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 673bb36ef92e617c99e63c2a018dc3e9869ad6592b400d9a1b5c0be3e1734f04
Files
-
673bb36ef92e617c99e63c2a018dc3e9869ad6592b400d9a1b5c0be3e1734f04.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE