Behavioral task
behavioral1
Sample
75fbe58e9720be552db8f7b606f352672ed121346065b6f393e5ae1e9a079d64.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
75fbe58e9720be552db8f7b606f352672ed121346065b6f393e5ae1e9a079d64.exe
Resource
win10v2004-20230915-en
General
-
Target
75fbe58e9720be552db8f7b606f352672ed121346065b6f393e5ae1e9a079d64
-
Size
2.2MB
-
MD5
48eda79b65e88575be8f0831c93f4e4b
-
SHA1
d163c0caa00ea3a64de6bda52fa6118e55030150
-
SHA256
75fbe58e9720be552db8f7b606f352672ed121346065b6f393e5ae1e9a079d64
-
SHA512
1f1cafa5a86181fd628b55f2309dda93c7dabad2e163070d526da14e182c9990412cba4f7248042540e75a5781a77d290da4bcc0bdf8d3e3bbd63de08dbdff41
-
SSDEEP
49152:MyzlBqvCjJKLfXfZBjKXPGClD0cToIt3G/0RNL:Myxy2JKLfxkH55JNL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 75fbe58e9720be552db8f7b606f352672ed121346065b6f393e5ae1e9a079d64
Files
-
75fbe58e9720be552db8f7b606f352672ed121346065b6f393e5ae1e9a079d64.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.UPX1 Size: 512B - Virtual size: 3.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.UPX1 Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE