Behavioral task
behavioral1
Sample
4859f21297d76bee066d6e6d6af2320750b470ae3f53a0fc7cb88fa51c24eccaN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4859f21297d76bee066d6e6d6af2320750b470ae3f53a0fc7cb88fa51c24eccaN.exe
Resource
win10v2004-20241007-en
General
-
Target
4859f21297d76bee066d6e6d6af2320750b470ae3f53a0fc7cb88fa51c24eccaN
-
Size
655KB
-
MD5
dc0a2b90d9f3825bd7b4eb4f36a59810
-
SHA1
8780142576d4d03b403a644354301fe4003d626a
-
SHA256
4859f21297d76bee066d6e6d6af2320750b470ae3f53a0fc7cb88fa51c24ecca
-
SHA512
6d4ac9f4cfbb1ecd0db61c221164c217fa81567d07374e901945c770ee88034dddf8082683a50ad8635dfa16975364e394e483ae857c9b069de566646448db38
-
SSDEEP
12288:SKg71yAoHNWR8bTH7MrcuWE/wove/j24yu/ATnZuPESLnV+pFM:1HNJDMor12mquPZjqi
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4859f21297d76bee066d6e6d6af2320750b470ae3f53a0fc7cb88fa51c24eccaN
Files
-
4859f21297d76bee066d6e6d6af2320750b470ae3f53a0fc7cb88fa51c24eccaN.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 3.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 653KB - Virtual size: 656KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE