Behavioral task
behavioral1
Sample
a06841902d61dd60cc0e221f01f91450N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
a06841902d61dd60cc0e221f01f91450N.exe
Resource
win10v2004-20240802-en
General
-
Target
a06841902d61dd60cc0e221f01f91450N.exe
-
Size
81KB
-
MD5
a06841902d61dd60cc0e221f01f91450
-
SHA1
f80343d77a9df172c156ccc5b88e56a8dfac360b
-
SHA256
013276c01088c7b8c06a0103f6f4e80cbdc91184055d5210db6d8f3535d56237
-
SHA512
c4953661c131ec37b1ce43c3661c6da914071b23cf8e1a4e416f5c43464eb8153a8ba55c000b3b3d9dde1b85265e88f0c1c1c636922e307fd64bbccdb5861af2
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcI9HSXM2MnBT37CPKKdJJ1Z:V7Zf/FAxTWoJJ7T1SwTW7JJ7T1SSGG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a06841902d61dd60cc0e221f01f91450N.exe
Files
-
a06841902d61dd60cc0e221f01f91450N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE