Behavioral task
behavioral1
Sample
589ac21825faeb92b1480cb3573e7aebfeb71d4e38df6210fb04a7fa4f0c7810N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
589ac21825faeb92b1480cb3573e7aebfeb71d4e38df6210fb04a7fa4f0c7810N.exe
Resource
win10v2004-20240802-en
General
-
Target
589ac21825faeb92b1480cb3573e7aebfeb71d4e38df6210fb04a7fa4f0c7810N
-
Size
4KB
-
MD5
f41e5343f92e6d44b5ff70c7d0c02460
-
SHA1
ad9ceed4ba5eb0fb647c0612cf0b8e9cd035b3bc
-
SHA256
589ac21825faeb92b1480cb3573e7aebfeb71d4e38df6210fb04a7fa4f0c7810
-
SHA512
8a7131956dfcdd1285ffb5878978ed7c5add65bcb656fc194209124a032a1a6d1c1b5de74298fd9891dcaf61b44197aece01ea3d1dd2e6373ea0a6a4c6bb6ab8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 589ac21825faeb92b1480cb3573e7aebfeb71d4e38df6210fb04a7fa4f0c7810N
Files
-
589ac21825faeb92b1480cb3573e7aebfeb71d4e38df6210fb04a7fa4f0c7810N.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE