Behavioral task
behavioral1
Sample
1d7166f1cb758d252af9904e32bd128df4a9b4292ca2d162a611eff35eabe8f7N.exe
Resource
win11-20241007-en
General
-
Target
1d7166f1cb758d252af9904e32bd128df4a9b4292ca2d162a611eff35eabe8f7N.exe
-
Size
3.3MB
-
MD5
2f0fcaa5e89062a81b58c83b674a64c0
-
SHA1
13e33c1618c51ed9b1addb7f44b3b65879862545
-
SHA256
1d7166f1cb758d252af9904e32bd128df4a9b4292ca2d162a611eff35eabe8f7
-
SHA512
d5f13e8501fa2debed15854fa49cc901d33f5c53291a1c09901260f4ad23c7fbc4fa6bbba1fea52f347bf4e337455ddf7dc65b400309612e9abae4c1bbe56557
-
SSDEEP
98304:/9JzAeYfc6nrsoXGOOmjwj7ag+KFDgKcE4cxFub:/TzxSAoXGlD7pNDgWxYb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1d7166f1cb758d252af9904e32bd128df4a9b4292ca2d162a611eff35eabe8f7N.exe
Files
-
1d7166f1cb758d252af9904e32bd128df4a9b4292ca2d162a611eff35eabe8f7N.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 7.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3.3MB - Virtual size: 3.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE