Behavioral task
behavioral1
Sample
308c27aff131921b52ddb966fc8ce0e0N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
308c27aff131921b52ddb966fc8ce0e0N.exe
Resource
win10v2004-20240802-en
General
-
Target
308c27aff131921b52ddb966fc8ce0e0N.exe
-
Size
89KB
-
MD5
308c27aff131921b52ddb966fc8ce0e0
-
SHA1
793eab18ecece03456d92cb81dd0f2ab7f97db1f
-
SHA256
86c3dd8347fe2320dc93310baad148b2b3de8788ee847c784177626cba63a386
-
SHA512
1d62627bcfdc7bdb1f5f7e8c1cc2d0679177e176a2c187d16c99c143fca99924d60c9addbb2e3028f7f3af46ce4cd8da4c55180f3e63121ae47ca75da790e63c
-
SSDEEP
1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8IZTkb/b8QL:fnyiQSo7Zgr4QL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 308c27aff131921b52ddb966fc8ce0e0N.exe
Files
-
308c27aff131921b52ddb966fc8ce0e0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE