Behavioral task
behavioral1
Sample
d91f9dc0fea7ac50b34b55a7b7d8d010N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d91f9dc0fea7ac50b34b55a7b7d8d010N.exe
Resource
win10v2004-20240802-en
General
-
Target
d91f9dc0fea7ac50b34b55a7b7d8d010N.exe
-
Size
97KB
-
MD5
d91f9dc0fea7ac50b34b55a7b7d8d010
-
SHA1
46e77b73d47bca624cea7610baddc9bffb88d95a
-
SHA256
934b2a55e89687c27bc5459038e3dc5bfe159daea50da89007824e6057e38d69
-
SHA512
14ca23f5ea58cf79d9ba3f04e231e06c1c8780e512dbf6215af4613b70e96d6ae268dc99be6ad6c6b7db5487e4a5fafc082528bd739e1f4b2a18b2ec12b83048
-
SSDEEP
3072:co74hNS16gv5o6/yVeybxNEfVdvzHIjrpYRUzpfvYRq22LhjF1:coEhCCoIxI7vz0pYRadARR2LV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d91f9dc0fea7ac50b34b55a7b7d8d010N.exe
Files
-
d91f9dc0fea7ac50b34b55a7b7d8d010N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 256KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 171KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ