Behavioral task
behavioral1
Sample
913ddcdfcfd59c6bd9d4579d4569a4d0N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
913ddcdfcfd59c6bd9d4579d4569a4d0N.exe
Resource
win10v2004-20240802-en
General
-
Target
913ddcdfcfd59c6bd9d4579d4569a4d0N.exe
-
Size
69KB
-
MD5
913ddcdfcfd59c6bd9d4579d4569a4d0
-
SHA1
5c0c0593d20a9c17fe68af3015ea541267757ef9
-
SHA256
29635626b5f133c5e53fde4d47e1d0b937dd37df239b85fc4c4ae7bd6edd4e4e
-
SHA512
997aca3b3e3ebdfbcb4b4d1c8020e90ba7454e0dc9355f0e899f27365f37c4b7a17e450d760c0e001f85f68dafb6c0a5ecdd04a2a48ff039caf9f25526dca327
-
SSDEEP
1536:V7Zf/FAxTWoJJZENTNyl2Sm0mKE5oejSgnYBlD1lCh+YiiaWg5EeHXDH+f7YWu9z:fny1tE42EE5oejSgnYBlD1lCh+YiiaWC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 913ddcdfcfd59c6bd9d4579d4569a4d0N.exe
Files
-
913ddcdfcfd59c6bd9d4579d4569a4d0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE