Behavioral task
behavioral1
Sample
fdbdb80d0b0296ae6adbeab021cee9b0N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
fdbdb80d0b0296ae6adbeab021cee9b0N.exe
Resource
win10v2004-20240802-en
General
-
Target
fdbdb80d0b0296ae6adbeab021cee9b0N.exe
-
Size
293KB
-
MD5
fdbdb80d0b0296ae6adbeab021cee9b0
-
SHA1
be5149636a6e0e4d42e79db0a5412a4ab4f50ff4
-
SHA256
cba6f5eeac066e604f23886fd69f9af21364f0ee3fc8a4ac199836dfb68bd36b
-
SHA512
8d3f7e00bc9e7fa44e1f5d7a9a83ada0a162fe1fc21eb019f57df69cd8d3388faa064cd9ac06bdd6061698c567c7d309ac06a80f433d1473e63db0843929a08d
-
SSDEEP
6144:g750HizPy7n+g47wSAr2QxMcnpjRBM8Aat6E5PB0beIwa2pX8EIHBZrfxoS4iJK:Diz+n87tArhxVjVAA6aPBwSXrk7rJoSw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fdbdb80d0b0296ae6adbeab021cee9b0N.exe
Files
-
fdbdb80d0b0296ae6adbeab021cee9b0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 267KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE