Behavioral task
behavioral1
Sample
24cacf397e5755a461e0044fc2066e3a1fa8bd4c9d123c5b75ee3a0613d3c5abN.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
24cacf397e5755a461e0044fc2066e3a1fa8bd4c9d123c5b75ee3a0613d3c5abN.exe
Resource
win10v2004-20240802-en
General
-
Target
24cacf397e5755a461e0044fc2066e3a1fa8bd4c9d123c5b75ee3a0613d3c5abN
-
Size
52KB
-
MD5
a278ba2682b9c323379a8279b369a040
-
SHA1
f7b2215dccf7cb9a447920c26fb247006603e184
-
SHA256
24cacf397e5755a461e0044fc2066e3a1fa8bd4c9d123c5b75ee3a0613d3c5ab
-
SHA512
39b3df1d258b3e7f40dbf10eb48f20283840478d2d6346db689533a805b90f825c3b7826a4cfde168c7bbe9a91eb61cbac40c382eb33ffa3c56fa34e0a47f9e2
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcI9Ro+QOViJfo+QOViJY8y:V7Zf/FAxTWoJJ7TPUr8y
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24cacf397e5755a461e0044fc2066e3a1fa8bd4c9d123c5b75ee3a0613d3c5abN
Files
-
24cacf397e5755a461e0044fc2066e3a1fa8bd4c9d123c5b75ee3a0613d3c5abN.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE