Behavioral task
behavioral1
Sample
68c1c77496745d05abdbf5ffe0609b7ac7b0847f9c68904d68fd2fdcabe5173e.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
68c1c77496745d05abdbf5ffe0609b7ac7b0847f9c68904d68fd2fdcabe5173e.exe
Resource
win10v2004-20231023-en
General
-
Target
68c1c77496745d05abdbf5ffe0609b7ac7b0847f9c68904d68fd2fdcabe5173e
-
Size
27KB
-
MD5
3c499b993ed62f0a2b9e7b61939efe34
-
SHA1
9436bc87685ea63d4951ff2969f24ae255d0bf87
-
SHA256
68c1c77496745d05abdbf5ffe0609b7ac7b0847f9c68904d68fd2fdcabe5173e
-
SHA512
1167bc2e51e10d84147d7403b84d1f15d776ab0dfdbe1101030f5149720765eb0ba6f572b5e5ec7951d82b83d6ee2a11fd6e25b348e8193092556b83feb542d5
-
SSDEEP
192:ivBJqAPhpeS1ZK8O3CDHIbzMZlbv110GPdYPmVI+UGj8C+RPj3dkUV0lfgZxKn2:cUAPopMZlB5P6d+UkSDqPlIZQ2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68c1c77496745d05abdbf5ffe0609b7ac7b0847f9c68904d68fd2fdcabe5173e
Files
-
68c1c77496745d05abdbf5ffe0609b7ac7b0847f9c68904d68fd2fdcabe5173e.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE