Static task
static1
Behavioral task
behavioral1
Sample
ывап.exe
Resource
win10-20240404-en
General
-
Target
ывап.exe
-
Size
45KB
-
MD5
a321daef0d03498e022182b11905cf00
-
SHA1
9be6eb5a336b3326c5373d4c934bdd99fd5e0627
-
SHA256
5ecf14d99b8e37484b3038a29a36f0e2a0f654021658990b5ffbec160a17b692
-
SHA512
a4be0f60be01456a8d30897a38787b22004a404cebb82557a70ccc699180b23920609a82387850f1df7c69b88d4d777478d5337133127419e4957d0f632acb7c
-
SSDEEP
768:j5NppfnPCJ21xEHUgdAqksnpdWukRvObyC6wfKK6H911wZYBxkD:j5NTPBEHLAFszihObldf2H9bwaxs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ывап.exe
Files
-
ывап.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ