Behavioral task
behavioral1
Sample
67d8df504c02d2c056ca9e45cd3c6800N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
67d8df504c02d2c056ca9e45cd3c6800N.exe
Resource
win10v2004-20240910-en
General
-
Target
67d8df504c02d2c056ca9e45cd3c6800N
-
Size
63KB
-
MD5
67d8df504c02d2c056ca9e45cd3c6800
-
SHA1
e6192926d0421f0d4286e9f045d7d64bec3d95cc
-
SHA256
80adcd78f5908c1b4faf5f72eb28cfcd7e2d1bc024a38e46e6033ee375e03d73
-
SHA512
38f6ddcbe9514ec323062d0bab592f77e8b4221a96f26227438ba9614fcec59490a3ede5555b57c0bcda03b43b079d8c6398d57b67b8505541faa76c6a8b5ca3
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcwBcCBcw/tio/tip101v65w:V7Zf/FAxTWoJJ7TTQoQ5Tl0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 67d8df504c02d2c056ca9e45cd3c6800N
Files
-
67d8df504c02d2c056ca9e45cd3c6800N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE