Behavioral task
behavioral1
Sample
15f197d36d58581d85262f1197437c2369d5bcb37e00e911114eaa8c2f65166aN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
15f197d36d58581d85262f1197437c2369d5bcb37e00e911114eaa8c2f65166aN.exe
Resource
win10v2004-20240802-en
General
-
Target
15f197d36d58581d85262f1197437c2369d5bcb37e00e911114eaa8c2f65166aN
-
Size
100KB
-
MD5
0ca91efe97331eb66e34ff3470037930
-
SHA1
04ddc9a90ddc4fa5db9f70bc6193cd7e407d4aeb
-
SHA256
15f197d36d58581d85262f1197437c2369d5bcb37e00e911114eaa8c2f65166a
-
SHA512
b2bb8e55e75ead517c7eaae4b0f08bfbfbaaf1a6cdcae8ed0506e290f8a1872f0ebaabcd59d465ead9b7e6736aa1dbf7b5821b0f5c70361ddc8188cba4083638
-
SSDEEP
1536:V7Zf/FAxTWoJJ7TIHSXIBlE3hha08yZySzCeR8Z7Mu:fny1UHSXIBlf08qySzCeR82u
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15f197d36d58581d85262f1197437c2369d5bcb37e00e911114eaa8c2f65166aN
Files
-
15f197d36d58581d85262f1197437c2369d5bcb37e00e911114eaa8c2f65166aN.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE