Behavioral task
behavioral1
Sample
a888f57389b2b9b160b217efb75f57c0N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a888f57389b2b9b160b217efb75f57c0N.exe
Resource
win10v2004-20240802-en
General
-
Target
a888f57389b2b9b160b217efb75f57c0N.exe
-
Size
1.3MB
-
MD5
a888f57389b2b9b160b217efb75f57c0
-
SHA1
2ddf2c9216f18dd7ef49533451d6ff3894cb9817
-
SHA256
9044e9f439cf16fb9324282b5029447b7109b82184a2ece75aa67a0edb06d930
-
SHA512
4ef371fb4ee706ff260f006989c3e22224539b67a7e0885407c402de9da8890e7ab4926a92ad7b93da7193098f711128a8fb90b6d2463a3b28378ef2b3e98127
-
SSDEEP
3072:fny16uM455eS2mvYrcCMq18qbqS5SBpGzUKG6GFDTxhUbitzi6iRIL8Smy+Len/v:KwuM4tvYABlphoTSzZV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a888f57389b2b9b160b217efb75f57c0N.exe
Files
-
a888f57389b2b9b160b217efb75f57c0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE