Behavioral task
behavioral1
Sample
f3d839e08efd4c445749bbfd48b56edb7c005d39fab9058471f6c58a52b5e388N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f3d839e08efd4c445749bbfd48b56edb7c005d39fab9058471f6c58a52b5e388N.exe
Resource
win10v2004-20240802-en
General
-
Target
f3d839e08efd4c445749bbfd48b56edb7c005d39fab9058471f6c58a52b5e388N
-
Size
655KB
-
MD5
4aa0c1618ab92812f5eeacfae7980c90
-
SHA1
d6affaaeadd3d3c4a887016251480a239d542f94
-
SHA256
f3d839e08efd4c445749bbfd48b56edb7c005d39fab9058471f6c58a52b5e388
-
SHA512
b483772bcef905dec66b9fa19ce64d53b8a53ae18bfa14eecc3b782f909b2b1bf19ef77fc7862d877545ee6b5c9a507b53a560c64e19aa253e852574d9b6198f
-
SSDEEP
12288:SKg71yAoHNWR8bTH7MrcuWE/wove/j24yu/ATnZuPESLnV+pF9:1HNJDMor12mquPZjqf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f3d839e08efd4c445749bbfd48b56edb7c005d39fab9058471f6c58a52b5e388N
Files
-
f3d839e08efd4c445749bbfd48b56edb7c005d39fab9058471f6c58a52b5e388N.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 3.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 653KB - Virtual size: 656KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE