Behavioral task
behavioral1
Sample
X.exe
Resource
win11-20241007-en
General
-
Target
X.exe
-
Size
103KB
-
MD5
d8c74ef17d6366180f58c1334ed40916
-
SHA1
981a19fca200eb1a0c9e29f8e4c5b10edac929d6
-
SHA256
ff4af3193eed8df840e40af9e1974e42d99cf2518e3177478a7d59bf373095ef
-
SHA512
833630d93fc9ca7569b853775f96a745e278dc3501d36485ee6f6ae129bbd9804581980f20e1d722f7e9ee342fe5c2a212a0c9527a474e101e26890009ac56f4
-
SSDEEP
1536:ceIHqfr3GiWoaXq6ooTtlSYO+mmyZWJGUAg11YqGTFsm0imYFU47o9TKui:ceIHqfrooShLXOLwJ+TOFvYFx7oZs
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource X.exe
Files
-
X.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 140KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE