Behavioral task
behavioral1
Sample
1710d5891ea2f1a1c64dd77dd09e13fd8ea0c4e4207e58637505318dd1136ee2.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
1710d5891ea2f1a1c64dd77dd09e13fd8ea0c4e4207e58637505318dd1136ee2.exe
Resource
win10v2004-20240802-en
General
-
Target
1710d5891ea2f1a1c64dd77dd09e13fd8ea0c4e4207e58637505318dd1136ee2
-
Size
21KB
-
MD5
b62cb4743419e70481b77ee0ea9983cf
-
SHA1
1bb4836221e3ddb4c1efaa8b20161704f4bf5fe1
-
SHA256
1710d5891ea2f1a1c64dd77dd09e13fd8ea0c4e4207e58637505318dd1136ee2
-
SHA512
14cb5e2b5e549b6cc61628160aea43df443b74de244f6c12013c4f7fd63ecfd8062a9f43c69b48fdc8454aff19b9bb93ac756c8dc812005b53d8c0d5770a0153
-
SSDEEP
384:6tFCQ1fb3dO6kOieRAnKlzsi03VM5Y/oPYFHKxY6/3Ryp:W0Q1T3QROSKP0FMyocH4/3R
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1710d5891ea2f1a1c64dd77dd09e13fd8ea0c4e4207e58637505318dd1136ee2
Files
-
1710d5891ea2f1a1c64dd77dd09e13fd8ea0c4e4207e58637505318dd1136ee2.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE