Behavioral task
behavioral1
Sample
0660da6f47204d4309edbf823f04c304.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0660da6f47204d4309edbf823f04c304.exe
Resource
win10v2004-20231215-en
General
-
Target
0660da6f47204d4309edbf823f04c304
-
Size
139KB
-
MD5
0660da6f47204d4309edbf823f04c304
-
SHA1
d7ce68dd0af1fa2f309e4f24f9e3de17b87cfc2b
-
SHA256
e28823fec7c0ad40e17b1e6d9b0f9459412d966f6455d8b33a9a14be995185e5
-
SHA512
c1bbf8b23a10b895abd73b6235f3d338025dd41c7228339620f4ed280bc38d8c5fd117a9217d13014e6ab04bad770ecb304141b074f7494f1f8ccd9adcc84447
-
SSDEEP
3072:Ne8jMCjM/keGyMYaKW6k307R11NJgZua0juxTlJjw:NftIPaNj3GP1NJgoSvJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0660da6f47204d4309edbf823f04c304
Files
-
0660da6f47204d4309edbf823f04c304.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 220KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 127KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE