Behavioral task
behavioral1
Sample
60bc990b3a74ed7ee10a303e5319e4fc01d2e788fda90b490d31c007de549f12.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
60bc990b3a74ed7ee10a303e5319e4fc01d2e788fda90b490d31c007de549f12.exe
Resource
win10v2004-20230915-en
General
-
Target
60bc990b3a74ed7ee10a303e5319e4fc01d2e788fda90b490d31c007de549f12
-
Size
445KB
-
MD5
2eaa973156357628d59acfc550f9f550
-
SHA1
191afca726c49a5666f2a29ab44b9c3d5c8c6246
-
SHA256
60bc990b3a74ed7ee10a303e5319e4fc01d2e788fda90b490d31c007de549f12
-
SHA512
2565e8618e22b93f56ff4b7ac70d5a8517a4ddf606f93cc2b41031aee96756a662d905189f2782d7eaabd60638ff515d82d2cfb3e4802a3c45cd5648d3e2de82
-
SSDEEP
1536:qKQ+11vu5ywVmbUM9lU4MHZLYT3cyav6eIePL2NJQV6kY4+85qBRmSIDzZsqmUbO:qKlX1jbxX+8czIWL2nk6kY9BRJGTtmt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 60bc990b3a74ed7ee10a303e5319e4fc01d2e788fda90b490d31c007de549f12
Files
-
60bc990b3a74ed7ee10a303e5319e4fc01d2e788fda90b490d31c007de549f12.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 89KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 511B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE