Behavioral task
behavioral1
Sample
9445f5f4b2cfd1cb1f0304ec8fd65170N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
9445f5f4b2cfd1cb1f0304ec8fd65170N.exe
Resource
win10v2004-20240802-en
General
-
Target
9445f5f4b2cfd1cb1f0304ec8fd65170N.exe
-
Size
47KB
-
MD5
9445f5f4b2cfd1cb1f0304ec8fd65170
-
SHA1
b7bfb6eb679d498f63e976b93c07cb4d848518e3
-
SHA256
030bd6e6bb62c90d22744f83cd5e4abea042b861ce0bca20626e080e8f60fb84
-
SHA512
7141ad3848935c9aa1239e5e96807bb6a86db1fa98260949f6be9d8b014a31a1d6a9bd651b4e3b4bd81a70344e35b91112b8feace2cad0e943f86e1b5e176594
-
SSDEEP
768:ZfxaPBxm3p/2A2haR85T83C8xx4DZK5RFBDjm5qzKvtqW6WKdQ8AIwQYQIZdA+mH:ZJaPBs3f8e3C8xx8K5Bm0G3rFaaLClAW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9445f5f4b2cfd1cb1f0304ec8fd65170N.exe
Files
-
9445f5f4b2cfd1cb1f0304ec8fd65170N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE