Behavioral task
behavioral1
Sample
0029bd96513708c2ec27eac29288d6825d9a3ea8571f0e705eb3f35ac3833b77N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0029bd96513708c2ec27eac29288d6825d9a3ea8571f0e705eb3f35ac3833b77N.exe
Resource
win10v2004-20241007-en
General
-
Target
0029bd96513708c2ec27eac29288d6825d9a3ea8571f0e705eb3f35ac3833b77N
-
Size
18KB
-
MD5
1d21f23a1e11687efd60366c92ceb6d0
-
SHA1
f871185b44cfa7360f8c49f885a0c012ac0852cb
-
SHA256
0029bd96513708c2ec27eac29288d6825d9a3ea8571f0e705eb3f35ac3833b77
-
SHA512
9f1d26624c744c48c36e03f4812520db0a5ac3d776b4ef941caccc0af3c19479ab91a0abdd3f501ccd1dbff745b89d3ba63d7e828b6bbfd24cf8288447cd07fd
-
SSDEEP
384:NiohNVSNmI+7gzPp2RcZEU+i7YPDWuM2nfvbzmlfpw/DAp96JuPni:Ni+NVSUI+gp2J9i7luM2nXvml6/kOJci
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0029bd96513708c2ec27eac29288d6825d9a3ea8571f0e705eb3f35ac3833b77N
Files
-
0029bd96513708c2ec27eac29288d6825d9a3ea8571f0e705eb3f35ac3833b77N.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 276KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 181KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE