Behavioral task
behavioral1
Sample
70b8f813c359d92ea5fc2f35f89e078890148107d66a1a2c9a4a90b19d4d1303.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
70b8f813c359d92ea5fc2f35f89e078890148107d66a1a2c9a4a90b19d4d1303.exe
Resource
win10v2004-20231023-en
General
-
Target
70b8f813c359d92ea5fc2f35f89e078890148107d66a1a2c9a4a90b19d4d1303
-
Size
128KB
-
MD5
c08da652caab4853d7def6272715d2a9
-
SHA1
418cad2404e0a94c6f4472ec64a065d17330df2b
-
SHA256
70b8f813c359d92ea5fc2f35f89e078890148107d66a1a2c9a4a90b19d4d1303
-
SHA512
16aca175f827d4a9903c9bed76fd82f246acfa4da759f07f0c4617826715a4d87636fc60ee854d21616a15517b1f651a1c1a538aa445bd8b548d11b504edcf50
-
SSDEEP
384:wJA9FW8uQJPLLuuFNNeB5HbHa3FDmgsZBPgU5PAFTbnwVx9uW0C/INrU8J9:wel/JXuuNK9za3dmBD6MVXJ29
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70b8f813c359d92ea5fc2f35f89e078890148107d66a1a2c9a4a90b19d4d1303
Files
-
70b8f813c359d92ea5fc2f35f89e078890148107d66a1a2c9a4a90b19d4d1303.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 276KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 112KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ