Behavioral task
behavioral1
Sample
ef64b8fe20369b46e431b72d9aa26edab69fcf37e38b93170ab5145a16a72172.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
ef64b8fe20369b46e431b72d9aa26edab69fcf37e38b93170ab5145a16a72172.exe
Resource
win10v2004-20230220-en
General
-
Target
ef64b8fe20369b46e431b72d9aa26edab69fcf37e38b93170ab5145a16a72172
-
Size
1.6MB
-
MD5
93860a5295646c6cf109533cd286d530
-
SHA1
c772a6c471ed0330575a42dde25bfcf3afbbe3c7
-
SHA256
ef64b8fe20369b46e431b72d9aa26edab69fcf37e38b93170ab5145a16a72172
-
SHA512
05ceef9ede8db8c520461cdf61b35bee9f60cb13fc1b9ce1d19a4a55d6b4f367ff431ec807afd913d8baf3ca2fad76ea6fa03b8597b98d9f0f9376b0b428926d
-
SSDEEP
24576:dgi5HXqVkLOVyQfaoU546QBb7n+dwxrWwWrK5lS7lbgPkDkg182EKBD:dgIpaHf/UjqbiOxJKQWlnkga2Ec
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef64b8fe20369b46e431b72d9aa26edab69fcf37e38b93170ab5145a16a72172
Files
-
ef64b8fe20369b46e431b72d9aa26edab69fcf37e38b93170ab5145a16a72172.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Silvana Size: 327B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE