Behavioral task
behavioral1
Sample
36b4a9e4135c2f52c9470f28d27e1d610f1cb04893c96388c4ac3dd9c64d2ef4.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
36b4a9e4135c2f52c9470f28d27e1d610f1cb04893c96388c4ac3dd9c64d2ef4.exe
Resource
win10v2004-20241007-en
General
-
Target
36b4a9e4135c2f52c9470f28d27e1d610f1cb04893c96388c4ac3dd9c64d2ef4
-
Size
41KB
-
MD5
06417c745fe35ea75e041675bbddaa08
-
SHA1
e866aa5c46ed2496bd485f47b07ee1cbd13084b5
-
SHA256
36b4a9e4135c2f52c9470f28d27e1d610f1cb04893c96388c4ac3dd9c64d2ef4
-
SHA512
ef725e0dfc86072dde9aa8d04eb1ca22456d56af4acf239fe251daee1a7cb7f0a3192b4b08cfe45ec7611ac359f3a38171d787fde2dcf45fc79a7ce48d84f2e5
-
SSDEEP
768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/o:AEwVs+0jNDY1qi/qQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36b4a9e4135c2f52c9470f28d27e1d610f1cb04893c96388c4ac3dd9c64d2ef4
Files
-
36b4a9e4135c2f52c9470f28d27e1d610f1cb04893c96388c4ac3dd9c64d2ef4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 511B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE