Behavioral task
behavioral1
Sample
ac30f64cef9edea7fca2746b0f3b23a81dd957fe4d3404d2ba6cc09d40ea162fN.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ac30f64cef9edea7fca2746b0f3b23a81dd957fe4d3404d2ba6cc09d40ea162fN.exe
Resource
win10v2004-20240802-en
General
-
Target
ac30f64cef9edea7fca2746b0f3b23a81dd957fe4d3404d2ba6cc09d40ea162fN
-
Size
75KB
-
MD5
76eef09d60287b6421f567f06d682680
-
SHA1
0dde84debc2435897c43d1e9ddc93ac4c6818223
-
SHA256
ac30f64cef9edea7fca2746b0f3b23a81dd957fe4d3404d2ba6cc09d40ea162f
-
SHA512
7ac90bf320d9b31a7d42e49efa62fee54a84a1e0c6ecccb0e5580b0064c65504d96b12b3823a1bcbb45ab49fe437148dcea83b521d3c97b62a152fe10e41b764
-
SSDEEP
1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+i:LJ0TAz6Mte4A+aaZx8EnCGVui
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac30f64cef9edea7fca2746b0f3b23a81dd957fe4d3404d2ba6cc09d40ea162fN
Files
-
ac30f64cef9edea7fca2746b0f3b23a81dd957fe4d3404d2ba6cc09d40ea162fN.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 82KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE