Behavioral task
behavioral1
Sample
620a7bedc60e1cb2a3826c27d2ce9052.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
620a7bedc60e1cb2a3826c27d2ce9052.exe
Resource
win10v2004-20231222-en
General
-
Target
620a7bedc60e1cb2a3826c27d2ce9052
-
Size
253KB
-
MD5
620a7bedc60e1cb2a3826c27d2ce9052
-
SHA1
11c44b49c1f9b14264ac47072b6411e1ca8001bc
-
SHA256
00c431f8f3bc927f935918e0eb8efba1b1f9e7e5fa0fcbe1856730e2e7c67337
-
SHA512
8dbc77a553e62ccd99c116d3279b166b53aa6ee746b03c2c341ee39b67b32f82983ae569ffea0f38e448be555681b1cbf0fe4c07e45fc905b9c83f8f5fe7f2d8
-
SSDEEP
3072:blN9RkkkkkkTLJ0Y6LFKab6lN9RkkkkkkTLJ0Y6LFy21tm9wxiK2J8G:5dkkkkkkZ6ZXAdkkkkkkZ6ZPkoB27
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 620a7bedc60e1cb2a3826c27d2ce9052
Files
-
620a7bedc60e1cb2a3826c27d2ce9052.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 74KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE