Behavioral task
behavioral1
Sample
05b0c6cd4447ac4e9272a65fd49a2d944487908a6f72e98113658bf609a7a5ceN.exe
Resource
win7-20240903-en
General
-
Target
05b0c6cd4447ac4e9272a65fd49a2d944487908a6f72e98113658bf609a7a5ceN
-
Size
368KB
-
MD5
804e103538590d76552a807c009e0b10
-
SHA1
2e2407309f9e79d603dd0d2c48db4990c487eaec
-
SHA256
05b0c6cd4447ac4e9272a65fd49a2d944487908a6f72e98113658bf609a7a5ce
-
SHA512
206b761fb9b92bccc7059ffe1bea8a693da64e6513b82287c4e1fa2ac6f69f235b5bbef279abe1e8e024a3376ce4ba90af9595c6f16c1dd5f7b6bb2b9b0d7381
-
SSDEEP
6144:QYml0tyeXfs81owi4yoshiGGrcxV8HkaIHkvxDzU+0md/XAKqTe:NmXEfs81VJbryVYkaIHkvx/UX0AVi
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05b0c6cd4447ac4e9272a65fd49a2d944487908a6f72e98113658bf609a7a5ceN
Files
-
05b0c6cd4447ac4e9272a65fd49a2d944487908a6f72e98113658bf609a7a5ceN.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 336KB - Virtual size: 336KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data3 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE