Behavioral task
behavioral1
Sample
03f86a1ef06c76ec14ed2eba64ee8bc0N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
03f86a1ef06c76ec14ed2eba64ee8bc0N.exe
Resource
win10v2004-20240802-en
General
-
Target
03f86a1ef06c76ec14ed2eba64ee8bc0N
-
Size
100KB
-
MD5
03f86a1ef06c76ec14ed2eba64ee8bc0
-
SHA1
79920788635a574747530071768b1bc50f077cf1
-
SHA256
3f50248e96baaf99ac2a9116d032d0b59f0589cfaa56933958b6694942a0fd95
-
SHA512
94e4bc9aa4cff07d71c4f605dee2b7eb68f24c200d67b3d67c0e4deb9a148fe8b81710a03ba0ae153619e1dc1eb00ecc0f6c9583d847ef0a114aa4bdaba648cd
-
SSDEEP
1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8zxY5NKZDLKZDN7syq8:fnyiQSox5WDgDNr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03f86a1ef06c76ec14ed2eba64ee8bc0N
Files
-
03f86a1ef06c76ec14ed2eba64ee8bc0N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE