Behavioral task
behavioral1
Sample
40e15c2215eaacdf9498505742de0ed7836dbc19e959a9acb8f03b30b5934014N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
40e15c2215eaacdf9498505742de0ed7836dbc19e959a9acb8f03b30b5934014N.exe
Resource
win10v2004-20241007-en
General
-
Target
40e15c2215eaacdf9498505742de0ed7836dbc19e959a9acb8f03b30b5934014N.exe
-
Size
544KB
-
MD5
87e3f6e329906d1766c2ec2310f2e7e0
-
SHA1
f46892ea74be364f5062fc3e3fd9c216c26ba1cb
-
SHA256
40e15c2215eaacdf9498505742de0ed7836dbc19e959a9acb8f03b30b5934014
-
SHA512
cea3de8a1277abcd713dd4f8732c35524362a4379952b64e87ada3c72cd116b5cb77f6b10f4c4648b46b19f2056a8af9b78db16d90127e897d28a7ffb37d53a9
-
SSDEEP
6144:Ebi+Lo0FXwz2JFByUSHC+QRrlDFVKT6EcAOIL5QX19eq9sro1FlgKhx+Zk:EG+HXDPswlDjK1cAL5QX19JuYb/r
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40e15c2215eaacdf9498505742de0ed7836dbc19e959a9acb8f03b30b5934014N.exe
Files
-
40e15c2215eaacdf9498505742de0ed7836dbc19e959a9acb8f03b30b5934014N.exe.exe windows:9 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 148KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vzxhqci Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ihznlkn Size: 59KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dvoyfty Size: 59KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cyytlgk Size: 58KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
aioqugh Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kktslaf Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rwjvzwz Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zlmdijb Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hrzzaiv Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ldsyrbh Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE