Behavioral task
behavioral1
Sample
66d808b763135b5c48e614109d5e545e.exe
Resource
win7-20231129-en
General
-
Target
66d808b763135b5c48e614109d5e545e
-
Size
784KB
-
MD5
66d808b763135b5c48e614109d5e545e
-
SHA1
1cced87b6351c0ab4e0febc39b19ed5448b65aef
-
SHA256
7127bb3a10843891eb9ab792cf16f799664c836ebe482d42365b6febe94623b5
-
SHA512
fa7612d96ba90009bee41d5c3e56c1e75a00f8b994502373ca15d4567407ec4a5baea06e2390b92180352df181c6282f21c2245fad1d2cd60e1d0a5e4e05a4c3
-
SSDEEP
24576:Ewrya9kYW6ABGaIKTnVQssgzfRpgqvFj0YhtjRvpN:EwrT9kN9GaVussg9p7j0StN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 66d808b763135b5c48e614109d5e545e
Files
-
66d808b763135b5c48e614109d5e545e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE