Behavioral task
behavioral1
Sample
d28d394b07cd74756a92cba517634ed0N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d28d394b07cd74756a92cba517634ed0N.exe
Resource
win10v2004-20240802-en
General
-
Target
d28d394b07cd74756a92cba517634ed0N
-
Size
18KB
-
MD5
d28d394b07cd74756a92cba517634ed0
-
SHA1
8741405e5009a1d7312921e2fce80c545f69ce1d
-
SHA256
15a8a2d03f3ea5e84a690ead19983fd7d4332ec5489d0939d980a2efeb2f0905
-
SHA512
7ffa2a436c9a2ba853b6cbc0f77885fb9f4a4b63b5e3aac3931764227bf378b802b9300ccae8c71ae770710365a216c1cbc68cfebba08b94acbe98befa549e3e
-
SSDEEP
384:8AfSahg15BxYz3p/2A2h/CJHF+MixtuttdnCGJh/xx4hZAMKr:jfxaPBxm3p/2A2haR85T83C8xx4DZKr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d28d394b07cd74756a92cba517634ed0N
Files
-
d28d394b07cd74756a92cba517634ed0N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE