Behavioral task
behavioral1
Sample
980c6055689fbba335a578fa87a8546152fa65bb6a6418851dfe124dc8b27baaN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
980c6055689fbba335a578fa87a8546152fa65bb6a6418851dfe124dc8b27baaN.exe
Resource
win10v2004-20240802-en
General
-
Target
980c6055689fbba335a578fa87a8546152fa65bb6a6418851dfe124dc8b27baaN
-
Size
111KB
-
MD5
116a68cb1c70b515d0c8fcc04d019e30
-
SHA1
d9a741d30c4275c484fdd495c0b7a1242aa9982e
-
SHA256
980c6055689fbba335a578fa87a8546152fa65bb6a6418851dfe124dc8b27baa
-
SHA512
f8dd44b1408716104558767eddb34c488c2db1160547c5e47a686db9666f8167e6cc855e82eb09a6b55f4c32af8f1d6cf52ec22f31e3077834679d93ac261357
-
SSDEEP
1536:V7Zf/FAxTWoJJTU3UytJfOYTW7JJTU3UytJfOA:fny1hu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 980c6055689fbba335a578fa87a8546152fa65bb6a6418851dfe124dc8b27baaN
Files
-
980c6055689fbba335a578fa87a8546152fa65bb6a6418851dfe124dc8b27baaN.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE