Behavioral task
behavioral1
Sample
008819306570810e6f305ec9070e4b80N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
008819306570810e6f305ec9070e4b80N.exe
Resource
win10v2004-20240802-en
General
-
Target
008819306570810e6f305ec9070e4b80N.exe
-
Size
11KB
-
MD5
008819306570810e6f305ec9070e4b80
-
SHA1
bd3b896f57d1e55dabea2bbf4ea661513daa605e
-
SHA256
4929ed4db095df1084e6d13b3fa22c89fc9bc1646cb359998d95c0b24948f29e
-
SHA512
2646a3c3cc982799f5cbff43aa2610276856871f6a7d4182d8e0d3328d98ebaa14be8f92629f34a9ea1588325761f5f289d9aee31e4e3336e73340692da01e70
-
SSDEEP
192:F0W5dLulqFGOcEt0dtHz0ryjGTlIqlQA/4lcSSGJnLFcAvk:Vhulq/gDCJXp7SZJLFcAc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 008819306570810e6f305ec9070e4b80N.exe
Files
-
008819306570810e6f305ec9070e4b80N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE