Behavioral task
behavioral1
Sample
5ce2731e28a6a34f15cba645557bfb03e658b0a589e7a1c776cc1ec7d6348221N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5ce2731e28a6a34f15cba645557bfb03e658b0a589e7a1c776cc1ec7d6348221N.exe
Resource
win10v2004-20241007-en
General
-
Target
5ce2731e28a6a34f15cba645557bfb03e658b0a589e7a1c776cc1ec7d6348221N
-
Size
91KB
-
MD5
401c60367ca544fee30d8a3e4f179460
-
SHA1
f61bf86077e56fd54c814b8f817c80e16c2592bb
-
SHA256
5ce2731e28a6a34f15cba645557bfb03e658b0a589e7a1c776cc1ec7d6348221
-
SHA512
179f4580e766fe620519ec93b610a7f29120ae82d11946e2126eb6c9c168de7378bfa9054c9f233fd6908f1ea6a5bf78deb36cb07bb79f1dcd87f333ad7eb590
-
SSDEEP
1536:ERsjdf1aM67v32Z9x5nouy8VT8Rsjdf1aM67v32Z9x5nouy8VTm:EOaHv3YpoutN8OaHv3YpoutNm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ce2731e28a6a34f15cba645557bfb03e658b0a589e7a1c776cc1ec7d6348221N
Files
-
5ce2731e28a6a34f15cba645557bfb03e658b0a589e7a1c776cc1ec7d6348221N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 140KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE