Behavioral task
behavioral1
Sample
54150ca6bb7ee52588397977fe67ca695a4c80a7494ba40e7c4cadfb4a2996e1N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
54150ca6bb7ee52588397977fe67ca695a4c80a7494ba40e7c4cadfb4a2996e1N.exe
Resource
win10v2004-20241007-en
General
-
Target
54150ca6bb7ee52588397977fe67ca695a4c80a7494ba40e7c4cadfb4a2996e1N
-
Size
59KB
-
MD5
8f6c66d616c2c9ede5859e22570c9660
-
SHA1
9ed57f2d04f6a710eab995dd736c3559d806c110
-
SHA256
54150ca6bb7ee52588397977fe67ca695a4c80a7494ba40e7c4cadfb4a2996e1
-
SHA512
ac9f3a05a98f137ee39f393460bc99b9247648b67be694a3c52b4b51f149708c2b1a19c71d84602cb98ed97c7c360b631543106660beb1f68b698c8446e770ec
-
SSDEEP
1536:3+ZgwRdiE8cO4p1xRjfTvSq5r3ZiIZ4nouy8uh1aQd:OeodiUO4p13b9HiIeoutuh1aQd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 54150ca6bb7ee52588397977fe67ca695a4c80a7494ba40e7c4cadfb4a2996e1N
Files
-
54150ca6bb7ee52588397977fe67ca695a4c80a7494ba40e7c4cadfb4a2996e1N.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE