Behavioral task
behavioral1
Sample
880aeda4a981751921d96b2d3ed22b30N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
880aeda4a981751921d96b2d3ed22b30N.exe
Resource
win10v2004-20240802-en
General
-
Target
880aeda4a981751921d96b2d3ed22b30N.exe
-
Size
69KB
-
MD5
880aeda4a981751921d96b2d3ed22b30
-
SHA1
5848f7a06eb730a49aaa292af81623523af7eac4
-
SHA256
6bec83b51f5ce651a4039f92a561699da349372e6b54b741af355cca2ed40fb4
-
SHA512
dbf061500deaa5138ac4d8ebabe73050a4fb5dc1c838774d66fe35185bd8ccac1dc090d986d957d7bb368ae9e24fb9d7ed03c94833fb73d6d74b3793a58de67b
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcI9HBT37CPKKdJJ1EXBwzEG:V7Zf/FAxTWoJJ7TDTW7JJ7T2Qj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 880aeda4a981751921d96b2d3ed22b30N.exe
Files
-
880aeda4a981751921d96b2d3ed22b30N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE