Behavioral task
behavioral1
Sample
82090bf96c7db11f5046faccc04d816d7c331bfc7d92d8334af49b6f1c5fd250N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
82090bf96c7db11f5046faccc04d816d7c331bfc7d92d8334af49b6f1c5fd250N.exe
Resource
win10v2004-20240802-en
General
-
Target
82090bf96c7db11f5046faccc04d816d7c331bfc7d92d8334af49b6f1c5fd250N
-
Size
655KB
-
MD5
200d2d3158096f26b03f7a1b68ad0450
-
SHA1
99917d4673f6634160ad1fbcb954d57bfa4f5f9a
-
SHA256
82090bf96c7db11f5046faccc04d816d7c331bfc7d92d8334af49b6f1c5fd250
-
SHA512
a2405f9f4a3ed2fe80da03d34e41823d36afd5c8f3ad7c0e650d2854282eba26435d9be217a1b0668ff89e6f68b217ec2a78f057de3ecce2a833e3cd0b57bf2b
-
SSDEEP
12288:SKg71yAoHNWR8bTH7MrcuWE/wove/j24yu/ATnZuPESLnV+pFK:1HNJDMor12mquPZjqY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 82090bf96c7db11f5046faccc04d816d7c331bfc7d92d8334af49b6f1c5fd250N
Files
-
82090bf96c7db11f5046faccc04d816d7c331bfc7d92d8334af49b6f1c5fd250N.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 3.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 653KB - Virtual size: 656KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE