Behavioral task
behavioral1
Sample
23f6b95e052b678b11a64c55f4f6edb71e2a33b2de44e1f09b7bb4dcd9eac7f2N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
23f6b95e052b678b11a64c55f4f6edb71e2a33b2de44e1f09b7bb4dcd9eac7f2N.exe
Resource
win10v2004-20240802-en
General
-
Target
23f6b95e052b678b11a64c55f4f6edb71e2a33b2de44e1f09b7bb4dcd9eac7f2N
-
Size
55KB
-
MD5
48a422fcd18e4e348e400703fe96f2f0
-
SHA1
e87959a6d0c5eea57189254419aff3e0f0bb7cf1
-
SHA256
23f6b95e052b678b11a64c55f4f6edb71e2a33b2de44e1f09b7bb4dcd9eac7f2
-
SHA512
e97c161cbd5eaf3bd8d89144dfcea614e7b9791ce1e5714b1658d3d6a91f6ded936196842b3f2cf86bec23549881c69a1810c7967241ff2a47ef32539082409f
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcI9Ro+QOViJfo+QOViJL:V7Zf/FAxTWoJJ7TPUA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 23f6b95e052b678b11a64c55f4f6edb71e2a33b2de44e1f09b7bb4dcd9eac7f2N
Files
-
23f6b95e052b678b11a64c55f4f6edb71e2a33b2de44e1f09b7bb4dcd9eac7f2N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE