Behavioral task
behavioral1
Sample
3595e26469d93cf1b8c3ed46d9aaab84ccb64ff80746750e79c9468062243631.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
3595e26469d93cf1b8c3ed46d9aaab84ccb64ff80746750e79c9468062243631.exe
Resource
win10v2004-20241007-en
General
-
Target
3595e26469d93cf1b8c3ed46d9aaab84ccb64ff80746750e79c9468062243631
-
Size
62KB
-
MD5
5f30c4a63274054d3dfa242c19491f62
-
SHA1
04115d0d5c1ec81c8a12090796f420cac4c5631f
-
SHA256
3595e26469d93cf1b8c3ed46d9aaab84ccb64ff80746750e79c9468062243631
-
SHA512
375b71951056b61316ff7f57a47a24eab74e798e7f5406ebb3582bcfef719dddd0f2f85858f71f7bc62cdaa2c2d24a9f22eae7a4563d1ce80e2d5f468d08f5d1
-
SSDEEP
1536:V7Zf/FAxTWoJJ7TUuf7maVF5sQXThyaqy91:fny1og
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3595e26469d93cf1b8c3ed46d9aaab84ccb64ff80746750e79c9468062243631
Files
-
3595e26469d93cf1b8c3ed46d9aaab84ccb64ff80746750e79c9468062243631.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE