Behavioral task
behavioral1
Sample
051340049802cd98ac50212ac926db70170f133fc63f4549535d84bb27fedc9f.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
051340049802cd98ac50212ac926db70170f133fc63f4549535d84bb27fedc9f.exe
Resource
win10v2004-20240802-en
General
-
Target
051340049802cd98ac50212ac926db70170f133fc63f4549535d84bb27fedc9f
-
Size
79KB
-
MD5
2906d2e69b71132468780e23037019e8
-
SHA1
a5a3949f1ecbf2d43ee87a8cff8ce10039b3724b
-
SHA256
051340049802cd98ac50212ac926db70170f133fc63f4549535d84bb27fedc9f
-
SHA512
69a7eba935bcd94ea2070f9cbc9ab1fcec88b8e1663187614790bf482a1cc0ba72226efb1ecebe4951c35a3bd328d0f3f8ece9efdbd644b143ef466139a73d83
-
SSDEEP
768:piNt5TYZSXmTOxll6WjoZVFe5WgFNnaDVHuABs17CDlnKj31/luXYSEb4k6QC:2yOxhoZVFEWu4D3M7083R4XYSEb4kE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 051340049802cd98ac50212ac926db70170f133fc63f4549535d84bb27fedc9f
Files
-
051340049802cd98ac50212ac926db70170f133fc63f4549535d84bb27fedc9f.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 133KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE