Behavioral task
behavioral1
Sample
45126b6ea290b73ea69829ebd5dc257f0f4f02d8593f0b2104e330ec70f80b14.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
45126b6ea290b73ea69829ebd5dc257f0f4f02d8593f0b2104e330ec70f80b14.exe
Resource
win10v2004-20240802-en
General
-
Target
45126b6ea290b73ea69829ebd5dc257f0f4f02d8593f0b2104e330ec70f80b14
-
Size
720KB
-
MD5
08f36a8a31a54ea11bdd71ad92ae83e6
-
SHA1
7f25e1cfb07b535b3be7647cc91167f2260cd6c6
-
SHA256
45126b6ea290b73ea69829ebd5dc257f0f4f02d8593f0b2104e330ec70f80b14
-
SHA512
11aea7c78d15377ffbd7c88de1d4c72b883f7ad2e26196da3a95fb66516721ebe8e718eed6fef7aa7ae216b3c01948b44bcaefd77e2342864dd0f423a693f8b5
-
SSDEEP
12288:VQtOBqlapwTTH6cPvetxc4HUePB1JiLa9sYC4wDNAEErs4waTOFgfF7mmHOc71HS:VI2qlapwTTH6cPvetxc4HUePB1JiLa9U
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45126b6ea290b73ea69829ebd5dc257f0f4f02d8593f0b2104e330ec70f80b14
Files
-
45126b6ea290b73ea69829ebd5dc257f0f4f02d8593f0b2104e330ec70f80b14.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE