Behavioral task
behavioral1
Sample
580e3af0c61ed9a603bf411b5bfe4520N.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
580e3af0c61ed9a603bf411b5bfe4520N.exe
Resource
win10v2004-20240802-en
General
-
Target
580e3af0c61ed9a603bf411b5bfe4520N.exe
-
Size
45KB
-
MD5
580e3af0c61ed9a603bf411b5bfe4520
-
SHA1
f32bf1aa9928e61a77b20a2fc7b8cecdd4c61583
-
SHA256
93e0f8da812fbd2eaa70104e5300090c8cad7cf1d58336ea08a28f10fcba15ed
-
SHA512
7765c6923a3fc1d2b82e1564c637da2bebc28a197d58c7813c78c36ad1e1c547a599c0978ef64a1e5d976a6ac486cafbd9ce6f0f052b54953f7c359e08797523
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcKuU:V7Zf/FAxTWoJJ7TruU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 580e3af0c61ed9a603bf411b5bfe4520N.exe
Files
-
580e3af0c61ed9a603bf411b5bfe4520N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE