Behavioral task
behavioral1
Sample
001e4b18dabad6e2e28c06aefe0b9b30N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
001e4b18dabad6e2e28c06aefe0b9b30N.exe
Resource
win10v2004-20240802-en
General
-
Target
001e4b18dabad6e2e28c06aefe0b9b30N.exe
-
Size
1.0MB
-
MD5
001e4b18dabad6e2e28c06aefe0b9b30
-
SHA1
24dc2ef0f5a0b15142c20b9ecbaf891740087915
-
SHA256
41c2f379d8fe06c7addf633a4f4fa229811bdecbc15a52659cac9914933efbb9
-
SHA512
b5690684465f65161220a73afc34a69eb68e403984743950539740b60cf08d785e0e813402f3027af12612b345fb80ada9a05fdf30e30a289d3385450e2c938c
-
SSDEEP
1536:V7Zf/FAxTWoJJ7T2NG6lRubpEY3OaN/uTP7iqKYu0:fny1T6lR407i2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 001e4b18dabad6e2e28c06aefe0b9b30N.exe
Files
-
001e4b18dabad6e2e28c06aefe0b9b30N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE