Behavioral task
behavioral1
Sample
310f492f97eda012d743dd014747711065962f145034a316c749f7b485a37435N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
310f492f97eda012d743dd014747711065962f145034a316c749f7b485a37435N.exe
Resource
win10v2004-20240802-en
General
-
Target
310f492f97eda012d743dd014747711065962f145034a316c749f7b485a37435N
-
Size
164KB
-
MD5
181f8b513a16e9cbb85cf9bc85928e10
-
SHA1
e378772a7076995087792de9f35aeef078dd4799
-
SHA256
310f492f97eda012d743dd014747711065962f145034a316c749f7b485a37435
-
SHA512
079f0d6473fb84b70677f3ee6a6241093263b80473aa555cf8b8cf5008739f883840015a34806a7652a03dd483706d9f1d34f1cd4b1ed3779b74060dc1e1e2a2
-
SSDEEP
3072:fnyiQSodYeHNmkDxfIyKoIWbsHfySkT5GeCyi348oWGRPOzkjId6q8UdrSD+kCou:KiQSodYeHNmPF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 310f492f97eda012d743dd014747711065962f145034a316c749f7b485a37435N
Files
-
310f492f97eda012d743dd014747711065962f145034a316c749f7b485a37435N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE