Behavioral task
behavioral1
Sample
5a636a82693b6396062cda1d83961970ef3b99529858ed84f6f38241e300fce6N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5a636a82693b6396062cda1d83961970ef3b99529858ed84f6f38241e300fce6N.exe
Resource
win10v2004-20240802-en
General
-
Target
5a636a82693b6396062cda1d83961970ef3b99529858ed84f6f38241e300fce6N
-
Size
41KB
-
MD5
b9f6934d39548cdb40cb41b3398d52b0
-
SHA1
70f9e1a555a46898349e31e22bb6e899bb1e254b
-
SHA256
5a636a82693b6396062cda1d83961970ef3b99529858ed84f6f38241e300fce6
-
SHA512
43f1b243ff5768579b976626aa59767b3a5b849497f352730fa3ebd8d25c16b81ace81b94a1c2a1c621bae5509996b0ce124c3986330ffd1c44f8e2443adb7b3
-
SSDEEP
768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/T0:AEwVs+0jNDY1qi/q4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a636a82693b6396062cda1d83961970ef3b99529858ed84f6f38241e300fce6N
Files
-
5a636a82693b6396062cda1d83961970ef3b99529858ed84f6f38241e300fce6N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 511B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE