Behavioral task
behavioral1
Sample
872afe490b7d69234ff9c333f2b866f0N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
872afe490b7d69234ff9c333f2b866f0N.exe
Resource
win10v2004-20240802-en
General
-
Target
872afe490b7d69234ff9c333f2b866f0N.exe
-
Size
54KB
-
MD5
872afe490b7d69234ff9c333f2b866f0
-
SHA1
cec85b421667ce1fe3ab2302e1aa3a8206e15933
-
SHA256
6d7301b8c6819e0ae499882b00a5c2b4dac3965e4768b16b5d3188a2a0d9bfc7
-
SHA512
6d06654cf780d914c2e8b26a906d6cff76db6833c2c62ea1407e3899f8ddc46a720508aaf9866bc14dffc056cc04fb2be5c79d8d826ea14cb7ef45b485656191
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcI9RK8h0:V7Zf/FAxTWoJJ7TnKp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 872afe490b7d69234ff9c333f2b866f0N.exe
Files
-
872afe490b7d69234ff9c333f2b866f0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE