Behavioral task
behavioral1
Sample
85737c20388ca75b990e274224824a2b5123cd985514ec22d5b1e93c0ce45916N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
85737c20388ca75b990e274224824a2b5123cd985514ec22d5b1e93c0ce45916N.exe
Resource
win10v2004-20240802-en
General
-
Target
85737c20388ca75b990e274224824a2b5123cd985514ec22d5b1e93c0ce45916N
-
Size
66KB
-
MD5
f06a92f4fe5cadfcd41f6771ec5189c0
-
SHA1
12cdbe9f1933efda96ff9cdafef41a46786acd6d
-
SHA256
85737c20388ca75b990e274224824a2b5123cd985514ec22d5b1e93c0ce45916
-
SHA512
d887c3d09e50432ddcc957ee4d2b925f0c775f38cad597bd15338a5583acc6861f8fd6f3409aa12a2fa8a70473c57a13c9cb64cb08b3f4eae5ca869a2088bcf9
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjSEXBwzEXBw3sgQw58eGkz2rcuesgQw58eGkz2r2:V7Zf/FAxTWWSFUpCUpllJ5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 85737c20388ca75b990e274224824a2b5123cd985514ec22d5b1e93c0ce45916N
Files
-
85737c20388ca75b990e274224824a2b5123cd985514ec22d5b1e93c0ce45916N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE