Behavioral task
behavioral1
Sample
d34f942872a634d0b5058f52a2690bc0N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d34f942872a634d0b5058f52a2690bc0N.exe
Resource
win10v2004-20240802-en
General
-
Target
d34f942872a634d0b5058f52a2690bc0N.exe
-
Size
51KB
-
MD5
d34f942872a634d0b5058f52a2690bc0
-
SHA1
e1e991e0261a6551454249e642372b867ff86358
-
SHA256
56cd3c99fe8527e52685f1e9cd3955f040e348a17c0c4b24811363aba4c9081d
-
SHA512
1f0fa00ba13360ae059a22f62dca03d20ba20b7f55e73e4b2ef6c4135146b5a08576d8dda3b7b81ad9d09f0e80c339fe564e50ddf33f252164f07d55b76587f0
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcI9UWLD:V7Zf/FAxTWoJJ7TOG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d34f942872a634d0b5058f52a2690bc0N.exe
Files
-
d34f942872a634d0b5058f52a2690bc0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE