Behavioral task
behavioral1
Sample
pointcross.exe
Resource
win10v2004-20231020-en
General
-
Target
pointcross.dat
-
Size
5.6MB
-
MD5
585381bc89179fe4fd758c05ae7049b4
-
SHA1
b8df37aeb48b75fa26f6ff8cc9cc213142f98d0d
-
SHA256
b66cd936cb687374b4822dc779e08dc1e2ab0b595a59fad709aab94d9f61c12d
-
SHA512
a550a2cdd0db4e2c070801ab4756dd79a72adab9a634dad1717747113095a7bb75aed430570fb6bd23d0c9f46f35a6385c887a31dbbb795bf17c45ee5a713ca7
-
SSDEEP
98304:uUgCUlXKwwNmruPMUDOJnjRNdeFasthpHxWDSVDVf/D6LY8Hghpxi37BaNChcxAP:DU1qNmykLVdqa00+jYDoyYCeH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource pointcross.dat
Files
-
pointcross.dat.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 5.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5.6MB - Virtual size: 5.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE