Behavioral task
behavioral1
Sample
f7c6ecc81154f3dc28b25f847553572f483eddf7f731700502b2e1b07bbd5c08N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
f7c6ecc81154f3dc28b25f847553572f483eddf7f731700502b2e1b07bbd5c08N.exe
Resource
win10v2004-20241007-en
General
-
Target
f7c6ecc81154f3dc28b25f847553572f483eddf7f731700502b2e1b07bbd5c08N
-
Size
655KB
-
MD5
a43189d6a94e47fedb88a3e4e7331ec0
-
SHA1
025a3c72a13452976f263abb77f00d79d69c171b
-
SHA256
f7c6ecc81154f3dc28b25f847553572f483eddf7f731700502b2e1b07bbd5c08
-
SHA512
426cffee484c886bbf83a2a4bd6e0f7e40e0afe8e70635404a3bbe6ff9106f87b46c1cf7d51457448c27d496694b873f31fa55104591b3e7bc767f2d33b2a069
-
SSDEEP
12288:SKg71yAoHNWR8bTH7MrcuWE/wove/j24yu/ATnZuPESLnV+pFa:1HNJDMor12mquPZjqs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f7c6ecc81154f3dc28b25f847553572f483eddf7f731700502b2e1b07bbd5c08N
Files
-
f7c6ecc81154f3dc28b25f847553572f483eddf7f731700502b2e1b07bbd5c08N.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 3.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 653KB - Virtual size: 656KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE