Behavioral task
behavioral1
Sample
5b12b7ac43b43ee5c76a41e580e48d2d48fc6da7b6352d258b5a7b9095c3c075N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5b12b7ac43b43ee5c76a41e580e48d2d48fc6da7b6352d258b5a7b9095c3c075N.exe
Resource
win10v2004-20240802-en
General
-
Target
5b12b7ac43b43ee5c76a41e580e48d2d48fc6da7b6352d258b5a7b9095c3c075N
-
Size
91KB
-
MD5
c8e51b6fbc2c98c05ea0fb26e3dacb30
-
SHA1
42f5dda62ec9208af29f2abe816bdf1352c3c7ab
-
SHA256
5b12b7ac43b43ee5c76a41e580e48d2d48fc6da7b6352d258b5a7b9095c3c075
-
SHA512
0af2a6a6df4a0347dea680d777052fc3d175e9ea4476b0f0ae17834ab318173dadad5c26a93f4a538a363ec1f691f1622a5910e8d885875cf783c77b978e2a63
-
SSDEEP
1536:kRsjd3GR2Dxy387Lnouy8VTnD4Rsjd3GR2Dxy387Lnouy8VTY:kOgUXoutND4OgUXoutNY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b12b7ac43b43ee5c76a41e580e48d2d48fc6da7b6352d258b5a7b9095c3c075N
Files
-
5b12b7ac43b43ee5c76a41e580e48d2d48fc6da7b6352d258b5a7b9095c3c075N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
BSS Size: - Virtual size: 140KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE