Behavioral task
behavioral1
Sample
870dcd4556e0689ac0de78fbedccd140N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
870dcd4556e0689ac0de78fbedccd140N.exe
Resource
win10v2004-20240802-en
General
-
Target
870dcd4556e0689ac0de78fbedccd140N.exe
-
Size
173KB
-
MD5
870dcd4556e0689ac0de78fbedccd140
-
SHA1
c6554df5bf246ece7842111e4c5e29765852f82e
-
SHA256
e20db2161cacb1412fc026e7f81ca6cc37bda3a5e71ce64af9b94b2c433a9b86
-
SHA512
714f40d6ff120aec345bebf2790cd0bed27428d0033cd6c9bd5eb824df40deacd8f8d765ef52efd1688e3faf0c4f82c6a27f50b69bf799a9fa774cebba7d727f
-
SSDEEP
1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8asUsJOLKc/xJtLJtTGl0ETWn1++PJHJj:fnyiQSohsUsUK90UQSohsUsUK90x
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 870dcd4556e0689ac0de78fbedccd140N.exe
Files
-
870dcd4556e0689ac0de78fbedccd140N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE