Behavioral task
behavioral1
Sample
330efdd3484bd599bda400f9e3a8a0d56154a669f9a1ba1eba3ef3f2e19e4c39N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
330efdd3484bd599bda400f9e3a8a0d56154a669f9a1ba1eba3ef3f2e19e4c39N.exe
Resource
win10v2004-20240802-en
General
-
Target
330efdd3484bd599bda400f9e3a8a0d56154a669f9a1ba1eba3ef3f2e19e4c39N
-
Size
4KB
-
MD5
39625b56ce5e4913daa90c3fd1074590
-
SHA1
ae17004274a05e331ea56a0d0604c0e306c169d2
-
SHA256
330efdd3484bd599bda400f9e3a8a0d56154a669f9a1ba1eba3ef3f2e19e4c39
-
SHA512
fb5f665dcc7a7948040f32ed5864383269b1be3b4211deb54a98e45979b8dd0ffd21184d285bb6f1663284d688f690eae983e83f04a446f4ba29eaa290d4fe71
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 330efdd3484bd599bda400f9e3a8a0d56154a669f9a1ba1eba3ef3f2e19e4c39N
Files
-
330efdd3484bd599bda400f9e3a8a0d56154a669f9a1ba1eba3ef3f2e19e4c39N.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE