Behavioral task
behavioral1
Sample
86bcb965b07d58d6729c7b4ba8003560N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
86bcb965b07d58d6729c7b4ba8003560N.exe
Resource
win10v2004-20240802-en
General
-
Target
86bcb965b07d58d6729c7b4ba8003560N.exe
-
Size
60KB
-
MD5
86bcb965b07d58d6729c7b4ba8003560
-
SHA1
9d8fc2a1cd731f1595f107b15c0da0857b3d955c
-
SHA256
0715775de831e857e08d5ddf1bd7f9a6c53f538a09fc51581c01543c67d9a491
-
SHA512
e824e4c3a4767f6c125f70a58f31f8267aab1aad03d99c9dfe908078b4926d9717c0183df30a995323c16c2b62aaeaed729f68aa011477f95a96f8f89bf1a0e7
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcwBcCBcw/tio/tieVaQ8QH:V7Zf/FAxTWoJJ7TTQoQQfH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 86bcb965b07d58d6729c7b4ba8003560N.exe
Files
-
86bcb965b07d58d6729c7b4ba8003560N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE