Behavioral task
behavioral1
Sample
506848375c4f4d9ab761e81f2c62cd3ca4be252c8933e1a5ec4da437ab90d0faN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
506848375c4f4d9ab761e81f2c62cd3ca4be252c8933e1a5ec4da437ab90d0faN.exe
Resource
win10v2004-20240802-en
General
-
Target
506848375c4f4d9ab761e81f2c62cd3ca4be252c8933e1a5ec4da437ab90d0faN
-
Size
655KB
-
MD5
a495a963da8d0edaba7849d1ba4db350
-
SHA1
e8be8f950b9c59c12592dae3aed03528fe38c12c
-
SHA256
506848375c4f4d9ab761e81f2c62cd3ca4be252c8933e1a5ec4da437ab90d0fa
-
SHA512
b9845fa316b12a9a74fa16d963b82b09d17b14fa4a559523d3bcb8c09eddba286989e6757c160ced7dea570fed79894f819c4a9a4029419805d368320bac8c22
-
SSDEEP
12288:SKg71yAoHNWR8bTH7MrcuWE/wove/j24yu/ATnZuPESLnV+pFZ:1HNJDMor12mquPZjqL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 506848375c4f4d9ab761e81f2c62cd3ca4be252c8933e1a5ec4da437ab90d0faN
Files
-
506848375c4f4d9ab761e81f2c62cd3ca4be252c8933e1a5ec4da437ab90d0faN.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 3.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 653KB - Virtual size: 656KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE