Behavioral task
behavioral1
Sample
30d4ba9cc006be76d764fc5ef20d9f4a96b27524505daa01f3ae2e0f0dcf5785N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
30d4ba9cc006be76d764fc5ef20d9f4a96b27524505daa01f3ae2e0f0dcf5785N.exe
Resource
win10v2004-20241007-en
General
-
Target
30d4ba9cc006be76d764fc5ef20d9f4a96b27524505daa01f3ae2e0f0dcf5785N.exe
-
Size
119KB
-
MD5
fe092747abcb1b58057a4d0ce657af00
-
SHA1
3db189e55d8d3b6c12401cf7f7393f7a13962dea
-
SHA256
30d4ba9cc006be76d764fc5ef20d9f4a96b27524505daa01f3ae2e0f0dcf5785
-
SHA512
876231f29148fc899a7a0e1be689100833cdeac65ea75ae84a0b14417c56f2bce8fd16fbabe6512545161f33979cd1e7df5b94108039532e9f57e1f1712245f8
-
SSDEEP
3072:tzuPVLDaAA3d2C9hQssDh7a7I4M3FyOO3+Bout8lc:qDvSb4f9a7IFLO3ioS8K
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30d4ba9cc006be76d764fc5ef20d9f4a96b27524505daa01f3ae2e0f0dcf5785N.exe
Files
-
30d4ba9cc006be76d764fc5ef20d9f4a96b27524505daa01f3ae2e0f0dcf5785N.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 124KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 90KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE