Behavioral task
behavioral1
Sample
548d7753c7eba4ff0f625f4fe8ccbf5dbe5471b79012d3426af024a80ac04c67N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
548d7753c7eba4ff0f625f4fe8ccbf5dbe5471b79012d3426af024a80ac04c67N.exe
Resource
win10v2004-20240802-en
General
-
Target
548d7753c7eba4ff0f625f4fe8ccbf5dbe5471b79012d3426af024a80ac04c67N
-
Size
66KB
-
MD5
45ffadc3ae65c4e733901017468d1f50
-
SHA1
55213a4a0ccdc8b260c011064d3b29abeb7fe7e2
-
SHA256
548d7753c7eba4ff0f625f4fe8ccbf5dbe5471b79012d3426af024a80ac04c67
-
SHA512
b4dcb2590e8ea14e7cd3344402e2ad24d171611b6ef6fdbc19a32d2072915e23aa051a3637a07a2c5487f6373200e4b789e27f09a9152d5e079194de1d9b73e9
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjyJJcbQbf1Oti1JGBQOOiQJhATBApwp133EskmKw:V7Zf/FAxTWoJJZENTBAOIfmKJfmKW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 548d7753c7eba4ff0f625f4fe8ccbf5dbe5471b79012d3426af024a80ac04c67N
Files
-
548d7753c7eba4ff0f625f4fe8ccbf5dbe5471b79012d3426af024a80ac04c67N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE