Behavioral task
behavioral1
Sample
c62868f5af4f8d9187b51969013d6960d76af85f361d98bb1de55f2860322e0f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
c62868f5af4f8d9187b51969013d6960d76af85f361d98bb1de55f2860322e0f.exe
Resource
win10v2004-20231215-en
General
-
Target
c62868f5af4f8d9187b51969013d6960d76af85f361d98bb1de55f2860322e0f
-
Size
456KB
-
MD5
31bf62e8c4b9e23081a42f8aafdc4d9e
-
SHA1
35b55ba38e875e41c107bc9f95a0816b88788bb9
-
SHA256
c62868f5af4f8d9187b51969013d6960d76af85f361d98bb1de55f2860322e0f
-
SHA512
18b6bd4d1c3e608972258f6eb586cc46e6933b2b91e7d3fc3a64726e0556a4c7ca1f2ee8ea04255079976c2eeac826cff34980472c15e021f7028521c294ff00
-
SSDEEP
12288:T13guju4xEi6GwcQC8CrL5qwtm8xABe/sxGoSb:ZZ76IprLxtO8/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c62868f5af4f8d9187b51969013d6960d76af85f361d98bb1de55f2860322e0f
Files
-
c62868f5af4f8d9187b51969013d6960d76af85f361d98bb1de55f2860322e0f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 792KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 433KB - Virtual size: 436KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE