Behavioral task
behavioral1
Sample
68997c2af7381026bafe1d20a9164cec.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
68997c2af7381026bafe1d20a9164cec.exe
Resource
win10v2004-20231215-en
General
-
Target
68997c2af7381026bafe1d20a9164cec
-
Size
133KB
-
MD5
68997c2af7381026bafe1d20a9164cec
-
SHA1
e2a665a3e16261dc137740ce4b38b89947a6ae2f
-
SHA256
2c1923b4d1de26309be2ae055b2b83c22e653b100b00003c4b6ff46670921ebe
-
SHA512
a94c1548c26ca9fa9bc9f680d8c4ff92f4cdb69ad0b0c5d1714d47480e73579f560d271e2953c4203f549e19a5a8a6f8a39ac37f31acbbb2fdb5a1137a7ed398
-
SSDEEP
3072:yNYJSz/OwEdq27dK5LvNJj5tw6QgZi6SIqcJKj22OvL0pVPcQ:yWYThE77dK5LlJjY6QgZirVcJvRvL0kQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68997c2af7381026bafe1d20a9164cec
Files
-
68997c2af7381026bafe1d20a9164cec.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE