Behavioral task
behavioral1
Sample
c28064695c17389201b4f5b84c0b30e969fa00dca4a7bcb14011ce5a9c82fa59N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
c28064695c17389201b4f5b84c0b30e969fa00dca4a7bcb14011ce5a9c82fa59N.exe
Resource
win10v2004-20240802-en
General
-
Target
c28064695c17389201b4f5b84c0b30e969fa00dca4a7bcb14011ce5a9c82fa59N
-
Size
91KB
-
MD5
3243f8acbdfa0879eed3ab57fe7b4240
-
SHA1
aca5dce1c344002867ee6a7deef0a1c29dbf6dda
-
SHA256
c28064695c17389201b4f5b84c0b30e969fa00dca4a7bcb14011ce5a9c82fa59
-
SHA512
5f843c35ae2f97e94a1c5410003d0ae91fea4096fc516241d775937aafeb2e8ed40d2bbd66df8a109837625e083207534033a5b52d36164d3a84963f6532ebeb
-
SSDEEP
1536:kRsjd3GR2Dxy387Lnouy8VTGRsjd3GR2Dxy387Lnouy8VTY:kOgUXoutNGOgUXoutNY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c28064695c17389201b4f5b84c0b30e969fa00dca4a7bcb14011ce5a9c82fa59N
Files
-
c28064695c17389201b4f5b84c0b30e969fa00dca4a7bcb14011ce5a9c82fa59N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
BSS Size: - Virtual size: 140KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE