Behavioral task
behavioral1
Sample
670f21ab616e75d12fc2d6b71f0e3ccd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
670f21ab616e75d12fc2d6b71f0e3ccd.exe
Resource
win10v2004-20231215-en
General
-
Target
670f21ab616e75d12fc2d6b71f0e3ccd
-
Size
5.0MB
-
MD5
670f21ab616e75d12fc2d6b71f0e3ccd
-
SHA1
8b54e24f28f1d65344350b3627e7f71c9979deeb
-
SHA256
567be157ac5d1e4ab8d1d453264c097703d12957c5dcad950f8b6f219fce7529
-
SHA512
64af539aadfc17653c1ddd3fb0aaa8e6393bc198389114332a673741e682baed2d03bc52446d5b47007817095a1b3285e0e7cc5be01fe7eb43f849b640371e1f
-
SSDEEP
49152:Y0ry4X9dA39YjdIR7TbyCdHqA8cOyec38LT7XXd:Yd4NIsdIVb3dqxP7XX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 670f21ab616e75d12fc2d6b71f0e3ccd
Files
-
670f21ab616e75d12fc2d6b71f0e3ccd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 6.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 159KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE