Behavioral task
behavioral1
Sample
90da2ddf30384b083ee8e5d8bd1ae390N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
90da2ddf30384b083ee8e5d8bd1ae390N.exe
Resource
win10v2004-20240802-en
General
-
Target
90da2ddf30384b083ee8e5d8bd1ae390N.exe
-
Size
657KB
-
MD5
90da2ddf30384b083ee8e5d8bd1ae390
-
SHA1
96c3f92641d1b62dd749173c2a0c1c37c964df1d
-
SHA256
8b27564b82f4b343b3a4e0ceffe0264c35eb7e7228413c3fbbe51192358cfd39
-
SHA512
7bbc29e76ed41d400a8d7b30e5e6e90f53f52f8a95e8e51d5790f6ec15bfa26e15d89c776bcd65dda2d46170ad9c63bf98ae7d848645f12b34282a380e0c6b80
-
SSDEEP
12288:7tKe6Zv23YLVFhBsC8iFHs+hsuQXIQRUP/g8t5/yQnbXh30:v6Zv2ivhBVnFvh5Q44UP48nPtk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 90da2ddf30384b083ee8e5d8bd1ae390N.exe
Files
-
90da2ddf30384b083ee8e5d8bd1ae390N.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 172KB - Virtual size: 172KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE