Behavioral task
behavioral1
Sample
2de594ffbaba129a9ee2295a5f93a461ed63c28cc8f164e18cacbe85ee2caf2aN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2de594ffbaba129a9ee2295a5f93a461ed63c28cc8f164e18cacbe85ee2caf2aN.exe
Resource
win10v2004-20240802-en
General
-
Target
2de594ffbaba129a9ee2295a5f93a461ed63c28cc8f164e18cacbe85ee2caf2aN.exe
-
Size
393KB
-
MD5
a05201981f2a2a920b81fdb71f316300
-
SHA1
d1b34e7b506650a7b21b0fcd869983754762e2c4
-
SHA256
2de594ffbaba129a9ee2295a5f93a461ed63c28cc8f164e18cacbe85ee2caf2a
-
SHA512
2b3e6596cfbcfe775d0d9585adf2f90286663ca9ddc99527d6ad2a69c30c40146626eb61a11dc68d92d48ca40e766bae34b35ad4b11cd0855314effc41125479
-
SSDEEP
6144:KbEv705T/4DO/B5fpRr3TmiTVVmVVV8VVNVVVcVVVxVVVPVVlVVVRVVVtVVWV60/:t05j4DO/B5fn5cq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2de594ffbaba129a9ee2295a5f93a461ed63c28cc8f164e18cacbe85ee2caf2aN.exe
Files
-
2de594ffbaba129a9ee2295a5f93a461ed63c28cc8f164e18cacbe85ee2caf2aN.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE