Behavioral task
behavioral1
Sample
011c8d102979c79d33714592b2cc4d10f1b4f6361a6457028c21fa2f2f23a352N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
011c8d102979c79d33714592b2cc4d10f1b4f6361a6457028c21fa2f2f23a352N.exe
Resource
win10v2004-20240802-en
General
-
Target
011c8d102979c79d33714592b2cc4d10f1b4f6361a6457028c21fa2f2f23a352N
-
Size
12KB
-
MD5
9ce2a5fc21e20ffdfeb6011316474db0
-
SHA1
c714106677587ae95aec9ec67ea8402b0e2d9904
-
SHA256
011c8d102979c79d33714592b2cc4d10f1b4f6361a6457028c21fa2f2f23a352
-
SHA512
8aebe0d2af3cb9f3ca2263e06d6f6f460653ae70c403b96d8d8c26d0719105adc3b8ef5ab0d91958312a7d2a16f26384927cce3e6e83ae4ef5d7bc95806b3fd7
-
SSDEEP
192:zjUWFh4fvYGIQnsA6psQt8FaNJhLkwcud2DH9VwGfctu55EJN:vKE7p3oaNJawcudoD7US5EJN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 011c8d102979c79d33714592b2cc4d10f1b4f6361a6457028c21fa2f2f23a352N
Files
-
011c8d102979c79d33714592b2cc4d10f1b4f6361a6457028c21fa2f2f23a352N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE