Behavioral task
behavioral1
Sample
79bda3afa7d5bbb9a2f97bb658698264cec4c27b508724203f6208e1d5cc9cb3N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
79bda3afa7d5bbb9a2f97bb658698264cec4c27b508724203f6208e1d5cc9cb3N.exe
Resource
win10v2004-20241007-en
General
-
Target
79bda3afa7d5bbb9a2f97bb658698264cec4c27b508724203f6208e1d5cc9cb3N
-
Size
1.0MB
-
MD5
440a28352e6cb2d7bec0fcc86e7eb260
-
SHA1
6fafb6b45eefe12a9089007662150fa7e6d319b6
-
SHA256
79bda3afa7d5bbb9a2f97bb658698264cec4c27b508724203f6208e1d5cc9cb3
-
SHA512
8f289aba39740d3cb934586b3e679ebd1db9f9680ee4d45f4efe305cd4390655463fba5549ba1dacd2e192c2ef6b7b5d6984beee1d2dc79a3408d80563176c8f
-
SSDEEP
24576:CPZOQy+TA1uCVNbNWZ+INUiMRXuL8C8k+1tpErEH7V:8ZOQy+TA1uOZBuwS+13x
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 79bda3afa7d5bbb9a2f97bb658698264cec4c27b508724203f6208e1d5cc9cb3N
Files
-
79bda3afa7d5bbb9a2f97bb658698264cec4c27b508724203f6208e1d5cc9cb3N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE