Behavioral task
behavioral1
Sample
001a00e3cde1578893a456c39f9a6340N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
001a00e3cde1578893a456c39f9a6340N.exe
Resource
win10v2004-20240802-en
General
-
Target
001a00e3cde1578893a456c39f9a6340N.exe
-
Size
62KB
-
MD5
001a00e3cde1578893a456c39f9a6340
-
SHA1
449997accb1ad28c2160ae0a0bb66cca03ff329f
-
SHA256
358948b6dde0acb7485c291c87e90925450edc8c5f7ec2bce932339311286cfa
-
SHA512
1593f37e3e3c9759054183b466790fd4bc0425cfef10b6f6f4af8269f1dad37ee95c77ad601c51f99170a99c3bf058edd8a6f6150ea88a278f020cfc1e2898b5
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjyJJBZBZaOAOIB3jM2jMO/7OSR4D1Gn2kD1ID1A4:V7Zf/FAxTWoJJB7LD2I2IbSRiNMm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 001a00e3cde1578893a456c39f9a6340N.exe
Files
-
001a00e3cde1578893a456c39f9a6340N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE