Behavioral task
behavioral1
Sample
083655aaca67870178dee62b258b20a0N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
083655aaca67870178dee62b258b20a0N.exe
Resource
win10v2004-20240802-en
General
-
Target
083655aaca67870178dee62b258b20a0N.exe
-
Size
655KB
-
MD5
083655aaca67870178dee62b258b20a0
-
SHA1
be8d7aff75c621d8c3baee36e3fa6c8155e38b46
-
SHA256
475af8d452740bfb1a080ae4eef8ccd98ddb026a059cd19dfe15423d517406cc
-
SHA512
ed7fe2e92dd6bbec19a37284dc7d19e3912b446d614353a0a4efebee73194689f942d1a7d920417c632e8e47e0dbed8a241d8ea3cb25d997fcddea065eec4424
-
SSDEEP
12288:SKg71yAoHNWR8bTH7MrcuWE/wove/j24yu/ATnZuPESLnV+pFv:1HNJDMor12mquPZjq5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 083655aaca67870178dee62b258b20a0N.exe
Files
-
083655aaca67870178dee62b258b20a0N.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 3.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 653KB - Virtual size: 656KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE