Behavioral task
behavioral1
Sample
304b5aec112d39d93d52b4e466bfc5a21cd24f7d35bae6ec0915a74cb176832bN.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
304b5aec112d39d93d52b4e466bfc5a21cd24f7d35bae6ec0915a74cb176832bN.exe
Resource
win10v2004-20240802-en
General
-
Target
304b5aec112d39d93d52b4e466bfc5a21cd24f7d35bae6ec0915a74cb176832bN
-
Size
76KB
-
MD5
b11d1e372bfc44783a2ffa6576c1f7c0
-
SHA1
850cbdc93fc0b72e5754f5878c969cdd4ddd5f31
-
SHA256
304b5aec112d39d93d52b4e466bfc5a21cd24f7d35bae6ec0915a74cb176832b
-
SHA512
7bc12c1cc42dff0a9dca6ac672b751135184b8cc7769f2cd0da1da620ae0ca71591f306abe360936091efb9840d2a7659ffbe9e85bb16497a1f0e147f499b757
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcI9uGeoGeEBT37CPKKdJJ1U:V7Zf/FAxTWoJJ7TkGeoGeiTW7JJ7TCx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 304b5aec112d39d93d52b4e466bfc5a21cd24f7d35bae6ec0915a74cb176832bN
Files
-
304b5aec112d39d93d52b4e466bfc5a21cd24f7d35bae6ec0915a74cb176832bN.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE