Behavioral task
behavioral1
Sample
d0bfbd56892c7a5e9f78644ec2155e8e57278b1d7fa24c0977776c43f072df40N.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
d0bfbd56892c7a5e9f78644ec2155e8e57278b1d7fa24c0977776c43f072df40N.exe
Resource
win10v2004-20241007-en
General
-
Target
d0bfbd56892c7a5e9f78644ec2155e8e57278b1d7fa24c0977776c43f072df40N
-
Size
119KB
-
MD5
960fe74af170e0845f358712ae66f1a0
-
SHA1
e99eaa406727286b21ac33cdc782484c93ac8fc7
-
SHA256
d0bfbd56892c7a5e9f78644ec2155e8e57278b1d7fa24c0977776c43f072df40
-
SHA512
e6adcf0191fb6e77f493ad3aebe2cc3343eed947dad925a033afcbc74b23de99d86e23c06c32a2fe69a16b1d625f77cae662c34c57ecda1c37eadec21185e631
-
SSDEEP
1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8zxY51lnlVnAMk5rggVe7pdPN:fnyiQSox51FLxk5rggVe7p1N
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0bfbd56892c7a5e9f78644ec2155e8e57278b1d7fa24c0977776c43f072df40N
Files
-
d0bfbd56892c7a5e9f78644ec2155e8e57278b1d7fa24c0977776c43f072df40N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE