Behavioral task
behavioral1
Sample
f4dd95eee42d31e0d08dc8545d063740N.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
f4dd95eee42d31e0d08dc8545d063740N.exe
Resource
win10v2004-20240802-en
General
-
Target
f4dd95eee42d31e0d08dc8545d063740N.exe
-
Size
33KB
-
MD5
f4dd95eee42d31e0d08dc8545d063740
-
SHA1
dddf5040bceec7211514d883bbcd412d3cda13a5
-
SHA256
c95e2bbe0230a1f21a809061206d74b5aac837db17867712a9984757ef2ab28e
-
SHA512
067d74245f975ae0e208c1d9c6dbacb0470b28bf7dbbdfd6bfb5c309a7877518d393d9c3b670bf5246a6a021c33d27744c0550c13b8fade966febe0e04ee966d
-
SSDEEP
192:ZAE9pqHEqEpWeVZKMjExR1ccNTfK4K57vy9t/ghnvvAE9pqHEqEpWeVZ7MjExR16:R9gHEqEpgMjiF+79gHEqEpBMjiF+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f4dd95eee42d31e0d08dc8545d063740N.exe
Files
-
f4dd95eee42d31e0d08dc8545d063740N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE