Behavioral task
behavioral1
Sample
3419632dbc3063ccd974bdeb6cb3f922e06183abd289d1f2185583e7e8cb2673N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3419632dbc3063ccd974bdeb6cb3f922e06183abd289d1f2185583e7e8cb2673N.exe
Resource
win10v2004-20241007-en
General
-
Target
3419632dbc3063ccd974bdeb6cb3f922e06183abd289d1f2185583e7e8cb2673N
-
Size
386KB
-
MD5
cdc9be4e0ecfb75f860100dfb9f17600
-
SHA1
649fe5f6cac6d48e583144ff3749142623617440
-
SHA256
3419632dbc3063ccd974bdeb6cb3f922e06183abd289d1f2185583e7e8cb2673
-
SHA512
21b05d57c99c439ee56a5622f73aaf56b57cfef9a50cfd83c6cc2625460adfd02c9abec4631187ba2d2d6ed8e1059d72463aef125f0c1791dd7ed017dbe27783
-
SSDEEP
6144:hzt8SadHTzjFRVDoyQEVB/u+oSgUfFmPGL:8SuzzjFrDoyQEVBjoSg+GGL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3419632dbc3063ccd974bdeb6cb3f922e06183abd289d1f2185583e7e8cb2673N
Files
-
3419632dbc3063ccd974bdeb6cb3f922e06183abd289d1f2185583e7e8cb2673N.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 154KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE