Behavioral task
behavioral1
Sample
91af3b45441ff0572083527cca165c95efb81d9214e92b9e554a7d705157256aN.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
91af3b45441ff0572083527cca165c95efb81d9214e92b9e554a7d705157256aN.exe
Resource
win10v2004-20240802-en
General
-
Target
91af3b45441ff0572083527cca165c95efb81d9214e92b9e554a7d705157256aN
-
Size
56KB
-
MD5
df847048f30193f8fbfbde1786620410
-
SHA1
938682ff4277419fa1511ed23346035468c4af70
-
SHA256
91af3b45441ff0572083527cca165c95efb81d9214e92b9e554a7d705157256a
-
SHA512
87662115d56096dc87a811f6651745bf821b6f7fa2e2ef5c11c53cc7b8be8f34929e94d7bfc1e7d78ad96e6694ff156ca486ea184578643b5c6d8a1702247c3f
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjSEXBwzEXBw3sgQw58eGkz2rcuesgQw58eGkz2rG:V7Zf/FAxTWbiR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 91af3b45441ff0572083527cca165c95efb81d9214e92b9e554a7d705157256aN
Files
-
91af3b45441ff0572083527cca165c95efb81d9214e92b9e554a7d705157256aN.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE