Behavioral task
behavioral1
Sample
206bb48b47e61ad7fa1894dde2998de0N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
206bb48b47e61ad7fa1894dde2998de0N.exe
Resource
win10v2004-20240802-en
General
-
Target
206bb48b47e61ad7fa1894dde2998de0N.exe
-
Size
124KB
-
MD5
206bb48b47e61ad7fa1894dde2998de0
-
SHA1
d53bf4e791abe988f2bc84ef94410326745ec694
-
SHA256
430e371aed230bf687f9980801f6e16ee4d8ffb8520e3a18d035e1e6dba4ae66
-
SHA512
846e2357aedf22786c703431942fbe0a3dd0d8c70f5f009b93ce6475f3fa87cfdf4ca00b39f375ce3228b6800e6c324bd47af76d095bd04a19bd37eb0b8faf93
-
SSDEEP
1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8asUsK8/8vTWn1++PJHJXA/OsIZfzc3/p:fnyiQSohsUsxkbQSohsUsxkS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 206bb48b47e61ad7fa1894dde2998de0N.exe
Files
-
206bb48b47e61ad7fa1894dde2998de0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE