Behavioral task
behavioral1
Sample
fe34bd1625546ea105ad8dbd967370f0N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fe34bd1625546ea105ad8dbd967370f0N.exe
Resource
win10v2004-20240802-en
General
-
Target
fe34bd1625546ea105ad8dbd967370f0N.exe
-
Size
60KB
-
MD5
fe34bd1625546ea105ad8dbd967370f0
-
SHA1
10f313156413ad83f62b15f3a654cfd227d366f7
-
SHA256
4a6883b70f7723b64f3a02e25233542238b14e134f5974875d0494949157af7a
-
SHA512
d710c2563f0076333c3c07402476bca1c095766a25b8fa6a06b2d954c5bb5974a8a1da3fa2da9964cd124b031dd6ea43fda9c9923ed25591a436151cf8233148
-
SSDEEP
384:7aQn/DfZQhaOFblOAjNkRsBHdXKg1haPRpZ/+/fmBGcqzUwiy:XtQhaMBO296aaPFW/fm9vwiy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe34bd1625546ea105ad8dbd967370f0N.exe
Files
-
fe34bd1625546ea105ad8dbd967370f0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE