Behavioral task
behavioral1
Sample
61fee542126e234f621025b407fac47e.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
61fee542126e234f621025b407fac47e.exe
Resource
win10v2004-20231215-en
General
-
Target
61fee542126e234f621025b407fac47e
-
Size
1003KB
-
MD5
61fee542126e234f621025b407fac47e
-
SHA1
d50344161b6127997af1a2ee3f5b4c5a1bf62785
-
SHA256
84a1904b9fbbebd179804d8fed1ef083fe02dc2ed84df15b67f53ea4ff1dc463
-
SHA512
b661c94c01092ad7d3081d25d820db0034ccf26b8cde7f7eccc4549b5082a5b57c47b1cdbc34c6f70f10579c7cfb30ce0d842ece0969c7a022afa249c574181f
-
SSDEEP
24576:gDaGk9ZG/LcD6OSJeYbKW9/DIbYvrrN+d8wrvAta4eCT:gDaGk9ZGAD6OSJeYbK4SYv/od8wTAtaK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 61fee542126e234f621025b407fac47e
Files
-
61fee542126e234f621025b407fac47e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE