Behavioral task
behavioral1
Sample
252bbd40fb1630896fe00b1692a58a30N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
252bbd40fb1630896fe00b1692a58a30N.exe
Resource
win10v2004-20240802-en
General
-
Target
252bbd40fb1630896fe00b1692a58a30N
-
Size
111KB
-
MD5
252bbd40fb1630896fe00b1692a58a30
-
SHA1
14508b336a2eb7871fbdbce3bdd2d1997e3a3d73
-
SHA256
261ee49947293d427b52c7b83613f08b00774803d2b89498aa2bd9f673724f83
-
SHA512
9403a3267f7cc13da01b5b26ad8aff6ab3fe8f60df9ba580daee32e07d82114fa1afe9cc28603a15202fc0671bd6d8bc2697946512fc5fbd4355c56bdbedb049
-
SSDEEP
1536:ELNIW39SaZTbFARlq7jC1OZstZu0TSVEdUJWTWd18fRt:ELlbZTZX3BAtTSVEdUJWTWd18fRt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 252bbd40fb1630896fe00b1692a58a30N
Files
-
252bbd40fb1630896fe00b1692a58a30N.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE