Behavioral task
behavioral1
Sample
61d28cdb341b930ac170f004574ff5b81f9673cdda2bd8afb6686a794db0e55e.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
61d28cdb341b930ac170f004574ff5b81f9673cdda2bd8afb6686a794db0e55e.exe
Resource
win10v2004-20230703-en
General
-
Target
61d28cdb341b930ac170f004574ff5b81f9673cdda2bd8afb6686a794db0e55e
-
Size
991KB
-
MD5
d87e3e2313cde3719a6733e2795e4973
-
SHA1
d15761085a7ef7d87e9f0ba597acaddc5cb8a4c4
-
SHA256
61d28cdb341b930ac170f004574ff5b81f9673cdda2bd8afb6686a794db0e55e
-
SHA512
736973332d8ff2902d27ad1ed2349131e36ce29c20aac2c6f137ce8952d36e002ae5923db55292400c2c9656e704cf7194710be2eefce7630103b145a5c33ab7
-
SSDEEP
6144:qpTBGBZ53GKC6VwNsj3W543KVciauHt2Hbe3+sRWZ9oKyPBEjG:qpa53+6Viy3WG3TuoHy+aWsKyOjG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 61d28cdb341b930ac170f004574ff5b81f9673cdda2bd8afb6686a794db0e55e
Files
-
61d28cdb341b930ac170f004574ff5b81f9673cdda2bd8afb6686a794db0e55e.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 857KB - Virtual size: 860KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 133KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE