Behavioral task
behavioral1
Sample
15a7932d6c9e6024b9f1c0e2f9e363be1470d9b3fc3ed091aa7ac61c78b8863b.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
15a7932d6c9e6024b9f1c0e2f9e363be1470d9b3fc3ed091aa7ac61c78b8863b.exe
Resource
win10v2004-20240802-en
General
-
Target
15a7932d6c9e6024b9f1c0e2f9e363be1470d9b3fc3ed091aa7ac61c78b8863b
-
Size
1.3MB
-
MD5
1c0b5b32a20a651975c6e2b9ee54ebf4
-
SHA1
4f23773128962b2c8617119a73332aeddf3645f7
-
SHA256
15a7932d6c9e6024b9f1c0e2f9e363be1470d9b3fc3ed091aa7ac61c78b8863b
-
SHA512
a51cc1e7dee34d74cd4def5b6d50595293c88d57be31ee3a9bb9966f8dd4374317de2f7e664471343bc398b8722e897bd45d1a6475bc693fa71ad7d838eb2ec2
-
SSDEEP
24576:OOjFgGJ4Y7c8UR2CAtR7uDj4PQ06k3OhzjBebBCxbGi83Nm2aihFE3Hken9a9:Dgq4Y74W7uH4PQ0bGfABCMi83uSFE3k
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15a7932d6c9e6024b9f1c0e2f9e363be1470d9b3fc3ed091aa7ac61c78b8863b
Files
-
15a7932d6c9e6024b9f1c0e2f9e363be1470d9b3fc3ed091aa7ac61c78b8863b.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 3.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE