Behavioral task
behavioral1
Sample
0df45237dd26bf3ae46672f6066352074656364fff036da4a52637df51304c62N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0df45237dd26bf3ae46672f6066352074656364fff036da4a52637df51304c62N.exe
Resource
win10v2004-20241007-en
General
-
Target
0df45237dd26bf3ae46672f6066352074656364fff036da4a52637df51304c62N
-
Size
80KB
-
MD5
be5f97a223051f4f7d049c6ba0e46da0
-
SHA1
43417fbd9f75b29d5ca5de74e1a460c5a16c472a
-
SHA256
0df45237dd26bf3ae46672f6066352074656364fff036da4a52637df51304c62
-
SHA512
1a6dd4ea2862fb4aeaf359bc4a94821bba00a628f05b9d185fae4368af8d3cc763e5f4278c3c3b63c1377514a19f063614c5954b7f78ed6c764af55f4f9b84d5
-
SSDEEP
1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+IKa:LJ0TAz6Mte4A+aaZx8EnCGVuIh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0df45237dd26bf3ae46672f6066352074656364fff036da4a52637df51304c62N
Files
-
0df45237dd26bf3ae46672f6066352074656364fff036da4a52637df51304c62N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 82KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE