Behavioral task
behavioral1
Sample
668e948a843f792f91ad9bcc5b553f2c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
668e948a843f792f91ad9bcc5b553f2c.exe
Resource
win10v2004-20231215-en
General
-
Target
668e948a843f792f91ad9bcc5b553f2c
-
Size
5.0MB
-
MD5
668e948a843f792f91ad9bcc5b553f2c
-
SHA1
75513e7f63f5fad838c1b7dd3f2f77d49376cb6a
-
SHA256
2131013bc07ff6026f889eb6732457d6bd577d777cb2ad08cbe6f684b3daaa3a
-
SHA512
7e32b8d1d7bd6dc2bdc8b22997879565a169fed2ce4bef2e88344c093c434ad76749a05db2e7d48f8c84976c451d983edda32e0b5a4775162d45b4d5a2c9b94c
-
SSDEEP
49152:vy+veCEf6ERu0CZFZUTuUY1pQddzL0+BqHatbIVGMdW5t5anRy4xbEd:vHWM0C3XUkQj0+8HsIVfW5t5D
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 668e948a843f792f91ad9bcc5b553f2c
Files
-
668e948a843f792f91ad9bcc5b553f2c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 6.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 159KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE