Behavioral task
behavioral1
Sample
a5075a2d4faa49d3da062e49515cdd00N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a5075a2d4faa49d3da062e49515cdd00N.exe
Resource
win10v2004-20240802-en
General
-
Target
a5075a2d4faa49d3da062e49515cdd00N.exe
-
Size
45KB
-
MD5
a5075a2d4faa49d3da062e49515cdd00
-
SHA1
fe0e0494cc36306b3100d6915345393b9b4e1d14
-
SHA256
6a91df868e1f186564fcd6ca678f6adeb52e927aae6b7ce58a223d61a837f21a
-
SHA512
fa84ae9da357270b8d6f80b84b422319a6778b4539893da2b9a76a49e66c72cc856a15be3636c1721d8b6d1dd98bf333bb3005eadf85d3b78ebfb2e34afc2055
-
SSDEEP
768:kSxam3Usjr3RT594UPS8GGCMDDxW738HbFtnbcuyD7UVOQI5noVZj:kRsjd3GR2Dxy387Lnouy8VTn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a5075a2d4faa49d3da062e49515cdd00N.exe
Files
-
a5075a2d4faa49d3da062e49515cdd00N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
BSS Size: - Virtual size: 140KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE