Behavioral task
behavioral1
Sample
209104e1a8c9f4423d28fe3cbc392150N.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
209104e1a8c9f4423d28fe3cbc392150N.exe
Resource
win10v2004-20240802-en
General
-
Target
209104e1a8c9f4423d28fe3cbc392150N
-
Size
89KB
-
MD5
209104e1a8c9f4423d28fe3cbc392150
-
SHA1
fade4927b3ab0a3ea9c7241cf5850a8cbbbe78e0
-
SHA256
4f922647b67e1539fa91aff60d95cfa0fed6a7d28038b1f265b60d15364e4baf
-
SHA512
d7357e4c52d83e9e103438462fe9a984c99c5475783be5dff4aac426f6be6136ea06e16dbcabdbccc768f73bf716726d2024792be874afd99747118f5e667e59
-
SSDEEP
1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8zxY5R:fnyiQSox5R
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 209104e1a8c9f4423d28fe3cbc392150N
Files
-
209104e1a8c9f4423d28fe3cbc392150N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE