Behavioral task
behavioral1
Sample
5268706f75186a10539af1454b4d8e50N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5268706f75186a10539af1454b4d8e50N.exe
Resource
win10v2004-20240802-en
General
-
Target
5268706f75186a10539af1454b4d8e50N
-
Size
54KB
-
MD5
5268706f75186a10539af1454b4d8e50
-
SHA1
053aed2fe9ce41520b3e636f24387fac6a239122
-
SHA256
530cb365b504e2e1ff17f682035338e022866e389925b647113fc936a4b64cc7
-
SHA512
2fc6ff0ad24b9d0860acac11ebe4fdbcf8ffc1f8b4b0ba3ba7dcee684b5c3e7d6219c84ffd160f6cbe7ec6b76ea7ae9ea4fb412ea2ec758f33dbffb867f7b22a
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjSEXBwzEXBw3sgQw58eGkz2rcuesgQw58eGkz2r1:V7Zf/FAxTWo7No
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5268706f75186a10539af1454b4d8e50N
Files
-
5268706f75186a10539af1454b4d8e50N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE