Behavioral task
behavioral1
Sample
169029742398c1a282bcde5ec91570aae1ba8c1b7599517b80d3293cec01829cN.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
169029742398c1a282bcde5ec91570aae1ba8c1b7599517b80d3293cec01829cN.exe
Resource
win10v2004-20240802-en
General
-
Target
169029742398c1a282bcde5ec91570aae1ba8c1b7599517b80d3293cec01829cN
-
Size
29KB
-
MD5
494e1a8c35855395dd3ca67a90324b50
-
SHA1
052f5eb5be05bfb7529e2f580778ddccf8c37ebb
-
SHA256
169029742398c1a282bcde5ec91570aae1ba8c1b7599517b80d3293cec01829c
-
SHA512
1755ccc38b2c9b67dcd070ad3bd7823d5c334b5346246e923381e05cd66ecc7273ea28db884a06dfa6ee92cf072c0cec70f7541d5da6413c8e26fb59f7dc8eff
-
SSDEEP
768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/z:AEwVs+0jNDY1qi/q7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 169029742398c1a282bcde5ec91570aae1ba8c1b7599517b80d3293cec01829cN
Files
-
169029742398c1a282bcde5ec91570aae1ba8c1b7599517b80d3293cec01829cN.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 511B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE