Behavioral task
behavioral1
Sample
d7e86595fc60dacfc67ea8e38d3c1c3931074b13cd8e6d19341889b62f01fbf0N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d7e86595fc60dacfc67ea8e38d3c1c3931074b13cd8e6d19341889b62f01fbf0N.exe
Resource
win10v2004-20240802-en
General
-
Target
d7e86595fc60dacfc67ea8e38d3c1c3931074b13cd8e6d19341889b62f01fbf0N
-
Size
757KB
-
MD5
85c7e0593ef8a131cbc64e3f14189e50
-
SHA1
f35473eb34bd85d09d4d321a550ff9ab2cf5b50e
-
SHA256
d7e86595fc60dacfc67ea8e38d3c1c3931074b13cd8e6d19341889b62f01fbf0
-
SHA512
5ceb0bdd0169cc8fc83d38e800ad608592731f3009d4424c91e9d611f40bc2c8f4c7284f1baa869753d8a09f2f964aeaa953cde831b876639fe1436d6135931f
-
SSDEEP
12288:PxS0PaVElqQ8dgaMaG+67goxcggi7NZX0aCSlXOkmyOlw:PxPP6ETaMZ+6cXu5Olw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d7e86595fc60dacfc67ea8e38d3c1c3931074b13cd8e6d19341889b62f01fbf0N
Files
-
d7e86595fc60dacfc67ea8e38d3c1c3931074b13cd8e6d19341889b62f01fbf0N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 580KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 161KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE