Behavioral task
behavioral1
Sample
712c1e5781e5655e42fbfb4935562d558178c91861de29edeb4f3e991d5da8b2N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
712c1e5781e5655e42fbfb4935562d558178c91861de29edeb4f3e991d5da8b2N.exe
Resource
win10v2004-20240802-en
General
-
Target
712c1e5781e5655e42fbfb4935562d558178c91861de29edeb4f3e991d5da8b2N
-
Size
12KB
-
MD5
26c209a87249a69faadd44802a809380
-
SHA1
def617553a382dc4723e4b4e6851de3c94e5e6ef
-
SHA256
712c1e5781e5655e42fbfb4935562d558178c91861de29edeb4f3e991d5da8b2
-
SHA512
b98f962c59bb3105a1ec298d2b2059054f9adc4545276f96618771a659232a184e025eba7e5e5487dc96b3c694f34ef170843d74ef8daec9230eb165614ec24f
-
SSDEEP
192:zjUWFh4fvYGIQnsA6psQt8FaNJhLkwcud2DH9VwGfctu55EJN:vKE7p3oaNJawcudoD7US5EJN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 712c1e5781e5655e42fbfb4935562d558178c91861de29edeb4f3e991d5da8b2N
Files
-
712c1e5781e5655e42fbfb4935562d558178c91861de29edeb4f3e991d5da8b2N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE