Behavioral task
behavioral1
Sample
d5f70ccb2a08ebddd8f1e07005996fa9ab2c85027ce0e819aabcb8865c21bfd4.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
d5f70ccb2a08ebddd8f1e07005996fa9ab2c85027ce0e819aabcb8865c21bfd4.exe
Resource
win10v2004-20231023-en
General
-
Target
d5f70ccb2a08ebddd8f1e07005996fa9ab2c85027ce0e819aabcb8865c21bfd4
-
Size
114KB
-
MD5
f630afe27cb62602053df83939a86fed
-
SHA1
a8f0e3113018ceed592c2f7083df834df63a6c88
-
SHA256
d5f70ccb2a08ebddd8f1e07005996fa9ab2c85027ce0e819aabcb8865c21bfd4
-
SHA512
4bc1ac56b7d63c980374805e7d3ec7c37167183e8f86271e669e0fc809072fd26580f081806686938b11666f25c337c4198acadef574162cbd4e9859dbaaca01
-
SSDEEP
3072:eXueThM2qu0ecibNCPabz/gVgsFZoout14B:wh7csCyEbZooSa
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d5f70ccb2a08ebddd8f1e07005996fa9ab2c85027ce0e819aabcb8865c21bfd4
Files
-
d5f70ccb2a08ebddd8f1e07005996fa9ab2c85027ce0e819aabcb8865c21bfd4.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 128KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 98KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE