Behavioral task
behavioral1
Sample
5e01d3fb4ffc2207c5eca942cb348c8f5ee7647c4439c10b3310ea922f6ab0c0N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5e01d3fb4ffc2207c5eca942cb348c8f5ee7647c4439c10b3310ea922f6ab0c0N.exe
Resource
win10v2004-20240802-en
General
-
Target
5e01d3fb4ffc2207c5eca942cb348c8f5ee7647c4439c10b3310ea922f6ab0c0N
-
Size
719KB
-
MD5
6331941a8c346da45e0a9dc29d076bc0
-
SHA1
e3d8cb69770911d7ad311e6d53c305781b0d4d2e
-
SHA256
5e01d3fb4ffc2207c5eca942cb348c8f5ee7647c4439c10b3310ea922f6ab0c0
-
SHA512
d916ef78fae9eeab4198dd5225f5f077050d3efc1f97c32882f0be55d445e5d9b49ee9803bd9a6c2a71d57461b66a8c6f7c72afc40719ad27896e89c6f57973f
-
SSDEEP
12288:7tKe6Zv23YLVFhl4futeZ3XVJRWCO8lcWEJ5IzZVfsw1R5ZY8vknpMvfI4bKwy:v6Zv2ivhl0utedlJE98lRIcZl1R5WBQo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e01d3fb4ffc2207c5eca942cb348c8f5ee7647c4439c10b3310ea922f6ab0c0N
Files
-
5e01d3fb4ffc2207c5eca942cb348c8f5ee7647c4439c10b3310ea922f6ab0c0N.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 172KB - Virtual size: 172KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE