Behavioral task
behavioral1
Sample
efd9e722a2102efbe7b4359c033964bb0778149b26c2ccb213839d5e2f5d2a2cN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
efd9e722a2102efbe7b4359c033964bb0778149b26c2ccb213839d5e2f5d2a2cN.exe
Resource
win10v2004-20241007-en
General
-
Target
efd9e722a2102efbe7b4359c033964bb0778149b26c2ccb213839d5e2f5d2a2cN
-
Size
81KB
-
MD5
4f347eb0b8718a3a70500af74f210ee0
-
SHA1
d75c571fc8c1c4cf5fcefd37e94d90aabf86a36f
-
SHA256
efd9e722a2102efbe7b4359c033964bb0778149b26c2ccb213839d5e2f5d2a2c
-
SHA512
2b4e6bc4b9156dc20c9bdc4dc245e244888b9ef55f6d5ccaf05065b92ab658cd3073da004a3e348082f52342fbb2a0c5be60e21ff844ef5c3778136c34190cab
-
SSDEEP
1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+MKI:LJ0TAz6Mte4A+aaZx8EnCGVuMv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource efd9e722a2102efbe7b4359c033964bb0778149b26c2ccb213839d5e2f5d2a2cN
Files
-
efd9e722a2102efbe7b4359c033964bb0778149b26c2ccb213839d5e2f5d2a2cN.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 82KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE